Some vulnerabilities have been reported in Adobe Flash Media Server, which can be exploited by malicious people to compromise a vulnerable system.

1) Integer overflow errors in the Edge Server component when parsing RTMP (Real Time Message Protocol) messages can be exploited to cause a heap-based buffer overflow via specially crafted packets sent to default ports 1935/TCP or 19350/TCP.

2) An error in the Edge Server component when parsing RTMP messages can be exploited to cause a memory corruption by sending a certain sequence of requests.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

The vulnerabilities affect versions 2.0.4 and prior.

Solution
Update to version 2.0.5.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Sebastian Apelt, reported via iDefense Labs
2) Sean Larsson, iDefense Labs

Original Advisory
APSB08-03:
http://www.adobe.com/support/security/bulletins/apsb08-03.html

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=662
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=663

Deep Links
Links available to Secunia VIM customers