First published: Mon Dec 21 2009(Updated: )
Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Flash Media Server | =2.0.1 | |
Adobe Flash Media Server | =3.0.1 | |
Adobe Flash Media Server | =2.0 | |
Adobe Flash Media Server | =2.0.2 | |
Adobe Flash Media Server | =3.5.1 | |
Adobe Flash Media Server | =2.0.5 | |
Adobe Flash Media Server | =3.0.4 | |
Adobe Flash Media Server | =3.0.3 | |
Adobe Flash Media Server | =3.0.2 | |
Adobe Flash Media Server | =2.0.3 | |
Adobe Flash Media Server | =2.0.4 | |
Adobe Flash Media Server | <=3.5.2 | |
Adobe Flash Media Server | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-3792 is considered a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2009-3792, upgrade Adobe Flash Media Server to version 3.5.3 or later.
CVE-2009-3792 affects multiple versions of Adobe Flash Media Server, including versions up to 3.5.2.
CVE-2009-3792 is a directory traversal vulnerability that allows attackers to load arbitrary DLL files.
Yes, CVE-2009-3792 can be exploited remotely by attackers to execute arbitrary code.