CVE-2008-5109

CWE-163 documents3 sources
Severity
5.0MEDIUM
EPSS
1.5%
top 18.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Media Server
Timeline
PublishedNov 25
Latest updateMay 17

Description

The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDadobe/flash_media_server3.0, 3.5+1

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x9v6-pr54-q32q: The default configuration of Adobe Flash Media Server (FMS) 3↗2022-05-17
▶
CVEList
CVE-2008-5109: The default configuration of Adobe Flash Media Server (FMS) 3↗2008-11-25
▶
CVE-2008-5109 (MEDIUM CVSS 5) | The default configuration of Adobe | cvebase.io