CVE-2006-4131

EPSS 8.4%

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/2156unverified exploitdbwww.exploit-db.com/exploits/28368unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html http://secunia.com/advisories/21426 http://securityreason.com/securityalert/1387 https://exchange.xforce.ibmcloud.com/vulnerabilities/28342 https://www.exploit-db.com/exploits/2156 http://www.arcsoft.com/support/downloads/download_patches/mms.asp http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf http://www.securityfocus.com/archive/1/442841/100/0/threaded http://www.securityfocus.com/bid/19451 http://www.vupen.com/english/advisories/2006/3261