CVE-2009-3792

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2009-3792 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3792
The original article can be found at: http://www.securityfocus.com/bid/37420

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2009-3792

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* Adobe Flash Media Server 3.5.2
* Adobe Flash Media Server 3.5.1
* Adobe Flash Media Server 3.0.4
* Adobe Flash Media Server 3.0.3
* Adobe Flash Media Server 2.0.5
* Adobe Flash Media Server 2.0.4
* Adobe Flash Media Server 2.0.3
* Adobe Flash Media Server 2.0.2
* Adobe Flash Media Server 2.0.1
* Adobe Flash Media Server 2.0
* Adobe Flash Media Server 3.0

Immune Systems:
* Adobe Flash Media Server 3.5.3
* Adobe Flash Media Server 3.0.5

Adobe Flash Media Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to load arbitrary Dynamic Linked Libraries (DLLs) present on the server. This could help the attacker launch further attacks.

Vendor Status:
Adobe as issued an update for this vulnerablity.

Patch Availability:
http://www.adobe.com/support/security/bulletins/apsb09-18.html

CVE Information:
CVE-2009-3792

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus