CVE-2008-5109 The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of vid...
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash media server | = 3.0 | No fix listed |
| Adobe flash media server | = 3.5 | No fix listed |
References
- 32771 third-party-advisory vendor-advisory
- www.adobe.com patch vendor-advisory
- 49952 vdb-entry