Detections
Analytics
Adobe Flash Media server < 3.5.6 / 4.0.2 Multiple Vulnerabilities (APSB11-11)
medium Nessus Network Monitor Plugin ID 5924
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The remote host is running Adobe Flash Media server.Versions of Adobe FLash Media Server earlier than 3.5.6 or 4.0.2 are potentially affected by multiple vulnerabilities :
- A memory corruption issue exists due to a race condition in the TLS extension code provided by the bundled version of OpenSSL. (CVE-2010-3864)
- An unspecified error relating to processing certain XML content could lead to a denial of service. (CVE-2011-0612)
Solution
Upgrade to Flash Media Server 3.5.6, 4.0.2, or later.See Also
http://www.adobe.com/support/security/bulletins/apsb11-11.html
Plugin Details
Severity: Medium
ID: 5924
Family: Web Servers
Published: 5/16/2011
Updated: 3/6/2019
Nessus ID: 53895
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:adobe:flash_player
Patch Publication Date: 5/12/2011
Vulnerability Publication Date: 5/12/2011
Reference Information
CVE: CVE-2010-0612, CVE-2010-3864