CVE Daily

CVE-2008-5109

The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable ...

Medium CVSS 5.0

Overview

The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.

CWE: CWE-16 Published: 2008-11-25T23:30:00.517
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags