Vulnerability in Adobe Flash Media Server

CVE-2008-5109

The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.

EPSS: 0.023 (81.6th percentile) — read the EPSS interpretation.

Affected products

Adobe Flash_media_server — versions 3.0, 3.5
N/a — versions n/a

Weakness classification (CWE)

CWE-16

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)