Adobe Flash Media Server XML Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Adobe Flash Media Server 4.x
Adobe Flash Media Server 3.5.x
Unaffected system:
Adobe Flash Media Server 4.0.2
Adobe Flash Media Server 3.5.6
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47840
Cve id: CVE-2011-0612

Adobe Flash Media Server provides a new delivery method that significantly reduces bandwidth costs and network load to help you provide the best Media experience.

The Adobe Flash Media Server has the XML Data Remote Denial of Service Vulnerability. Remote attackers can exploit this vulnerability to cause DOS.

<* Source: Dirk Neely

Link: http://www.adobe.com/support/security/bulletins/apsb11-11.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Adobe
-----
Adobe has released a Security Bulletin (APSB11-11) and patches for this:

APSB11-11: Security update available for Adobe Flash Media Server

Link: http://www.adobe.com/support/security/bulletins/apsb11-11.html