CVE-2007-6148

Description

Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspecified sequence of Real Time Message Protocol (RTMP) requests.

Affected products

• Adobe / connect_enterprise_server6
• Adobe / flash_media_server_22.0.4

References

• VENDOR_ADVISORYhttp://www.adobe.com/support/security/bulletins/apsb08-04.html
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/0539
• VENDOR_ADVISORYhttp://secunia.com/advisories/28947
• MISChttp://www.securitytracker.com/id?1019398
• MISChttp://www.securityfocus.com/bid/27762
• MISChttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=663
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/0538/references
• VENDOR_ADVISORYhttp://secunia.com/advisories/28946
• VENDOR_ADVISORYhttp://www.adobe.com/support/security/bulletins/apsb08-03.html