Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time Message Protocol (RTMP) message with a crafted integer field that is used for allocation.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=662 - | |
References | () http://secunia.com/advisories/28946 - Patch, Vendor Advisory | |
References | () http://secunia.com/advisories/28947 - Patch, Vendor Advisory | |
References | () http://www.adobe.com/support/security/bulletins/apsb08-03.html - | |
References | () http://www.adobe.com/support/security/bulletins/apsb08-04.html - Patch | |
References | () http://www.securityfocus.com/bid/27762 - Patch | |
References | () http://www.securitytracker.com/id?1019399 - | |
References | () http://www.vupen.com/english/advisories/2008/0538/references - | |
References | () http://www.vupen.com/english/advisories/2008/0539 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/40471 - |
Information
Published : 2008-02-13 21:00
Updated : 2024-11-21 00:39
NVD link : CVE-2007-6149
Mitre link : CVE-2007-6149
CVE.ORG link : CVE-2007-6149
JSON object : View
Products Affected
adobe
- connect_enterprise_server
- flash_media_server_2
CWE
CWE-189
Numeric Errors