CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4132

The CVE-2006-4132 entry affects ArcSoft MMS Composer versions 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier. The vulnerability enables remote impact via WAPPush messages sent to UDP port 2948, causing resource exhaustion and application crash (denial of service). The available s...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4132: Undefined Security Weakness

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4131: Undefined Security Weakness

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

[Full-disclosure] PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service

Vulnerability Report ----------------------------- Vendor: Microsoft and ArcSoft Product: PocketPC OS and MMS Composer Versions: MMS Composer: 1.5.5.6, 2.0.0.13 possible others Platform: PocketPC tested on: WinCE 4.2 and WinCE 4.21, possible others Architecture: ARM Devices: HP iPAQ h6315, i-mate...

Multiple ArcSoft MMS Composer for PocketPC security vulnerabilities

Multiple vulnerabilities with DoS and code execution impacts on MMS receiving...

PocketPC Mms Composer - 'WAPPush' Denial of Service

/ This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org http://www.mulliner.org/pocketpc/ NotfiFlood - a...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================= PocketPC MMS Composer WAPPush Denial of Service Exploit ========================================================= / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Compose...

ArcSoft Mms Composer 1.5.5/2.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/19451/info ArcSoft MMS Composer is affected by multiple vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits can allow remote attackers to cause denial-of-service conditions and to execute arbitrary machine code in...

PocketPC Mms Composer - WAPPush Denial of Service

PocketPC Mms Composer - WAPPush Denial of Service / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/19451/info ArcSoft MMS Composer is affected by multiple vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits can allow remote attackers to cause...

USN-309-1: libmms vulnerability

Several buffer overflows were found in libmms. By tricking a user into opening a specially crafted remote multimedia stream with an application using libmms, a remote attacker could overwrite an arbitrary memory portion with zeros, thereby crashing the program. In Ubuntu 5.10, this affects the...

[Full-disclosure] [USN-309-1] libmms vulnerability

=========================================================== Ubuntu Security Notice USN-309-1 July 05, 2006 libmms vulnerability CVE-2006-2200 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 This advisory also applies ...

Ubuntu 4.10 / 5.04 : xine-lib vulnerabilities (USN-123-1)

Two buffer overflows have been discovered in the MMS and Real RTSP stream handlers of the Xine library. By tricking a user to connect to a malicious MMS or RTSP video/audio stream source with an application that uses this library, an attacker could crash the client and possibly even execute...

CVE-2005-4812

The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the ICCP Toolkit for MMS-EASE 4.10 and earlier, allows remote attackers to cause a denial of service process crash via certain network traffic, as demonstrated usi...

FreeBSD : mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities (91c606fc-b5d0-11d9-a788-0001020eed82)

A xine security announcement reports : By a user receiving data from a malicious network streaming server, an attacker can overrun a heap buffer, which can, on some systems, lead to or help in executing attacker-chosen malicious code with the permissions of the user running a xine-lib based media...

[SA15987] MMS Ripper MMST Streams Buffer Overflow Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2213

MMS Ripper contains a buffer overflow in mms_interp_header (in mms.c) that affects versions before 0.6.4. A crafted file with more than 20 streams can allow remote code execution. Impact: arbitrary code execution by crafted input via the vulnerable file. Root cause: unsafe handling in mms_interp_...