CVE-2007-3392

Wireshark vulnerability CVE-2007-3392: Wireshark up to version 0.99.6 could enter an infinite loop and cause a denial of service when parsing malformed SSL or MMS packets. Connected documents confirm this CVE is among a set (including 3389–3393) fixed by upgraded Wireshark binaries (e.g., 0.99.6/...

CVE-2007-3392

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed 1 SSL or 2 MMS packets that trigger an infinite loop...

Unfixed XSS vulnerability at www.mms-clan.nl

Security researcher CoNqUeRoR, has submitted on 26/05/2007 a cross-site-scripting XSS vulnerability affecting www.mms-clan.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/05/2007. It is currently...

CVE-2006-6489: Undefined Security Weakness

The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other control system applications, allows remote attackers to cause a denial of service application termination and restart via malformed packets...

MiMMS媒体流处理远程栈溢出漏洞

MiMMS是一款使用MMS协议下载并保存流媒体的程序。 MiMMS在处理畸形的数据时，远程攻击者可能利用此漏洞在用用户机器上执行任意指令。 MiMMS的getheader和getmediapacket函数在从服务器读取数据时存在栈溢出漏洞。如果用户受骗连接到了恶意的服务器的话，就会触发这个漏洞，导致执行任意代码。 xine xine-lib 1.1.0 xine xine-lib 1.0.1 xine xine-lib 1.0 MiMMS MiMMS 0.0.9 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200607-07）以及相应补丁:...

Windows CE MMS多媒体短信编辑器远程溢出漏洞

Windows CE是微软开发维护的运行于嵌入式设备的操作系统。 Windows CE自带的MMS多媒体短信编辑器程序实现上存在多个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户设备上执行任意指令。 MMS多媒体短信编辑器在处理短信中TransactionID、Subject、ContentLocation等多个头部字段时存在溢出问题，攻击者可能通过向受害者发送畸形MMS消息导致在用户机器上执行任意指令。 Microsoft MMS Composer 2.0.0.13 Microsoft MMS Composer 1.5.5.6...

CVE-2005-4812: Undefined Security Weakness

The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the ICCP Toolkit for MMS-EASE 4.10 and earlier, allows remote attackers to cause a denial of service process crash via certain network traffic, as demonstrated usi...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4132

The CVE-2006-4132 entry affects ArcSoft MMS Composer versions 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier. The vulnerability enables remote impact via WAPPush messages sent to UDP port 2948, causing resource exhaustion and application crash (denial of service). The available s...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4131

ArcSoft MMS Composer is affected by multiple buffer overflows in MMS parsers (M-Notification.ind, M-Retrieve.conf, and SMIL parsers) affecting versions 1.5.5.6 and 2.0.0.13 (and possibly earlier). This can allow remote attackers to crash the application or execute arbitrary code via crafted MMS m...

CVE-2006-4132: Undefined Security Weakness

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4131: Undefined Security Weakness

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

Multiple ArcSoft MMS Composer for PocketPC security vulnerabilities

Multiple vulnerabilities with DoS and code execution impacts on MMS receiving...

[Full-disclosure] PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service

Vulnerability Report ----------------------------- Vendor: Microsoft and ArcSoft Product: PocketPC OS and MMS Composer Versions: MMS Composer: 1.5.5.6, 2.0.0.13 possible others Platform: PocketPC tested on: WinCE 4.2 and WinCE 4.21, possible others Architecture: ARM Devices: HP iPAQ h6315, i-mate...

PocketPC Mms Composer - WAPPush Denial of Service

PocketPC Mms Composer - WAPPush Denial of Service / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org...

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/19451/info ArcSoft MMS Composer is affected by multiple vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits can allow remote attackers to cause...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================= PocketPC MMS Composer WAPPush Denial of Service Exploit ========================================================= / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Compose...