CVE-2008-5109: Medium severity Adobe Flash Media Server vulnerability

Published Nov 25, 2008

Updated

The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software.

Affected Software

2 affected components

Adobe Flash Media Server=3.5

Adobe Flash Media Server=3.0

Remediation

Patch Available

http://www.adobe.com/support/security/advisories/apsa08-11.html

Event History

Nov 25, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-5109?

CVE-2008-5109 is considered to be of medium severity due to its potential for unauthorized access to content.

How can I fix CVE-2008-5109?

To fix CVE-2008-5109, ensure that SWF Verification is enabled in your Adobe Flash Media Server settings.

Which versions of Adobe Flash Media Server are affected by CVE-2008-5109?

CVE-2008-5109 affects Adobe Flash Media Server versions 3.0 and 3.5.

What does CVE-2008-5109 allow remote attackers to do?

CVE-2008-5109 allows remote attackers to make copies of video content via stream-capture software.

Is CVE-2008-5109 a widespread vulnerability?

CVE-2008-5109 is notable within the context of media content security, particularly for users of older Adobe Flash Media Server versions.