CVE-2017-5878

Published: Jun 8, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized Java data.

Affected (27)

Products: Red5: Media Server

Red5

1 product

Media Server

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Red5 Media Server	Version 1.0.2
Red5 Media Server	Version 1.0.2 milestone1
Red5 Media Server	Version 1.0.3
Red5 Media Server	Version 1.0.4
Red5 Media Server	Version 1.0.5
Red5 Media Server	Version 1.0.6
Red5 Media Server	Version 1.0.7
Red5 Media Server	Version 1.0.7 milestone1
Red5 Media Server	Version 1.0.7 milestone2
Red5 Media Server	Version 1.0.7 milestone3
Red5 Media Server	Version 1.0.7 milestone4
Red5 Media Server	Version 1.0.7 milestone5
Red5 Media Server	Version 1.0.7 milestone6
Red5 Media Server	Version 1.0.7 milestone7
Red5 Media Server	Version 1.0.8 milestone10
Red5 Media Server	Version 1.0.8 milestone11
Red5 Media Server	Version 1.0.8 milestone12
Red5 Media Server	Version 1.0.8 milestone13
Red5 Media Server	Version 1.0.8 milestone1
Red5 Media Server	Version 1.0.8 milestone2
Red5 Media Server	Version 1.0.8 milestone3
Red5 Media Server	Version 1.0.8 milestone4
Red5 Media Server	Version 1.0.8 milestone5
Red5 Media Server	Version 1.0.8 milestone6
Red5 Media Server	Version 1.0.8 milestone7
Red5 Media Server	Version 1.0.8 milestone8
Red5 Media Server	Version 1.0.8 milestone9