CVE-2005-3900

Impact

Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or crash), as demonstrated using an alpha release build of Flash Player 8.5 (build 133).

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/17611
• http://securitytracker.com/id?1015220
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-10.html
• http://www.macromedia.com/support/breeze/licensed_support.html#item-2
• http://www.osvdb.org/20869
• http://www.securityfocus.com/bid/15434
• http://www.vupen.com/english/advisories/2005/2442
• http://secunia.com/advisories/17611
• http://securitytracker.com/id?1015220
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-10.html
• http://www.macromedia.com/support/breeze/licensed_support.html#item-2
• http://www.osvdb.org/20869
• http://www.securityfocus.com/bid/15434
• http://www.vupen.com/english/advisories/2005/2442