CVE-2024-45970

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message...

CVE-2024-45971

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c880c4f0 allow a malicious server to cause a stack-based buffer overflow via the MMS IdentifyResponse message...

CVE-2024-45970: Buffer Copy without Checking Size of Input

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message...

CVE-2024-45970

The MZ Automation LibIEC61850 open-source library for the IEC 61850 protocol is vulnerable to multiple buffer overflows in the MMS Client . This issue occurs before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc and allows a malicious server to trigger a stack-based buffer overflow by sending a ...

CVE-2024-45971

The MZ Automation LibIEC61850 open-source library for the IEC 61850 protocol contains multiple buffer overflows in its MMS Client . These vulnerabilities are caused by a lack of input size checking, allowing a malicious server to trigger a stack-based buffer overflow via the MMS IdentifyResponse ...

CVE-2024-45969

NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e357ef33 allows a malicious server to Cause a Denial-of-Service via the MMS InitiationResponse message...

CVE-2024-45970

Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd756264e9c5bc allow a malicious server to cause a stack-based buffer overflow via the MMS FileDirResponse message...

CVE-2024-20118

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062392; Issue ID: MSV-1621...

CVE-2024-20119

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue ID: MSV-1620...

CVE-2024-20119

A security vulnerability exists in mms (associated with MediaTek Chipsets ) due to an incorrect bounds check resulting in a possible out-of-bounds write . This flaw can lead to local escalation of privilege , requiring System execution privileges . Exploitation does not require user interaction. ...

CVE-2024-20119

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue ID: MSV-1620...

CVE-2024-20119

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue ID: MSV-1620...

CVE-2024-20118

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062392; Issue ID: MSV-1621...

CVE-2024-20118

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062392; Issue ID: MSV-1621...

CVE-2024-20118

A security vulnerability exists in the mms component of MediaTek Chipsets due to an incorrect bounds check, which can result in an out-of-bounds write . An attacker can exploit this flaw to achieve local escalation of privilege , requiring System execution privileges . Exploitation does not requi...

CVE-2024-20118: Write-what-where Condition

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062392; Issue ID: MSV-1621...

CVE-2024-20119: Write-what-where Condition

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09062301; Issue ID: MSV-1620...

PT-2024-18604 · Mms · Mms

Name of the Vulnerable Software and Affected Versions: mms affected versions not specified Description: The issue is related to a possible out of bounds write due to an incorrect bounds check in mms. This could lead to local escalation of privilege with System execution privileges needed. User...

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

Details have emerged about multiple security vulnerabilities in two implementations of the Manufacturing Message Specification MMS protocol that, if successfully exploited, could have severe impacts in industrial environments. "The vulnerabilities could allow an attacker to crash an industrial...

VLC < 3.0.21 DoS

VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream heap based overflow. If successful, a malicious third party could trigger either a crash of VLC or an arbitrary code execution with the...