Well, the server just responds with acknowledgement information, the client is doing most of the work and most of the complex parts of RTMP are hand waved and faked by both the client and the server because no one cares about how Flash used to work.

So somewhat unlikely to be able to exploit it but have at it hass.

I'd imagine it'd be easier to exploit the server side, actually.