Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly...
Vulnerability Description
Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4131
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/19451
- http://securityreason.com/securityalert/1387
- https://www.exploit-db.com/exploits/2156
- http://www.securityfocus.com/archive/1/442841/100/0/threaded
- http://www.arcsoft.com/support/downloads/download_patches/mms.asp
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28342
- http://www.vupen.com/english/advisories/2006/3261
- http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf
- http://secunia.com/advisories/21426
Affected Vendor
arcsoft
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.