Vulnerability Details CVE-2005-3900
Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or crash), as demonstrated using an alpha release build of Flash Player 8.5 (build 133).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.2%
CVSS Severity
CVSS v2 Score 7.8
References
- http://secunia.com/advisories/17611
- http://securitytracker.com/id?1015220
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-10.html
- http://www.macromedia.com/support/breeze/licensed_support.html#item-2
- http://www.osvdb.org/20869
- http://www.securityfocus.com/bid/15434
- http://www.vupen.com/english/advisories/2005/2442
- http://secunia.com/advisories/17611
- http://securitytracker.com/id?1015220
- http://www.macromedia.com/devnet/security/security_zone/mpsb05-10.html
- http://www.macromedia.com/support/breeze/licensed_support.html#item-2
- http://www.osvdb.org/20869
- http://www.securityfocus.com/bid/15434
- http://www.vupen.com/english/advisories/2005/2442
Products affected by CVE-2005-3900
-
cpe:2.3:a:macromedia:breeze:4.0
-
cpe:2.3:a:macromedia:breeze:4.1
-
cpe:2.3:a:macromedia:breeze:5