Adobe Flash Media Server CVE-2011-0612 XML Data Remote Denial of Service Vulnerability

Bugtraq ID:	47840
Class:	Unknown
CVE:	CVE-2011-0612
Remote:	Yes
Local:	No
Published:	May 12 2011 12:00AM
Updated:	May 12 2011 12:00AM
Credit:	Dirk Neely of Stickam
Vulnerable:	Adobe Flash Media Server 3.5.4 Adobe Flash Media Server 3.5.3 Adobe Flash Media Server 3.5.2 Adobe Flash Media Server 3.5.1 Adobe Flash Media Server 4.0.1 Adobe Flash Media Server 4.0 Adobe Flash Media Server 3.5.5 Adobe Flash Media Server 3.5
Not Vulnerable:	Adobe Flash Media Server 4.0.2 Adobe Flash Media Server 3.5.6

Adobe Flash Media Server CVE-2011-0612 XML Data Remote Denial of Service Vulnerability

Adobe Flash Media Server is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause denial-of-service conditions.

Versions prior to Flash Media Server 3.5.6 and 4.0.2 are vulnerable.

Adobe Flash Media Server CVE-2011-0612 XML Data Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe Flash Media Server CVE-2011-0612 XML Data Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Adobe Flash Media Server CVE-2011-0612 XML Data Remote Denial of Service Vulnerability

References:

• Flash Media Server Homepage (Adobe)
  
• APSB11-11 Security update available for Adobe Flash Media Server (Adobe)