Adobe.Flash.Media.Server.Resource.Exhaustion.DoS

Release Date Dec 03, 2009
Severity high
Impact System Compromise: Remote attackers can run malicious code on the affected system.
Description This indicates an attack attempt against a code-execution vulnerability in Adobe Flash Media Server (FMS). The vulnerability is caused by an error when the vulnerable software handles a specially crafted RTMP command message which could lead to execution of arbitrary code on the server.
Affected Products Flash Media Server 3.5.2 and earlier versions
Recommended Actions Upgrade to the version 3.5.3, available from the vendor's web site: http://www.adobe.com/support/flashmediaserver/downloads_updaters.html.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-3791
Reference/s http://www.adobe.com/support/security/bulletins/apsb09-18.html

Fortinet