VideoLAN VLC Media Player MMS Plugin Stack Buffer Overflow - ver 2 (CVE-2012-1775)

A stack buffer overflow vulnerability has been reported in VLC Media Player. The vulnerability is due to insufficient bounds checking in the MMS access plugin while copying a hostname into a stack buffer. A remote attacker can exploit this issue by convincing a target user to open a specially...

Threat Outbreak Alert: Fake MMS Email Messages on March 4, 2014

Medium Alert ID: 33177 First Published: 2014 March 5 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a multimedia messaging service MMS message for the recipient. The text in the email message attempts to convince...

10th Anniversary of the World’s first Mobile Malware 'Cabir'

The year 2014 starts with the formation of new mobile malware like ‘Android.HeHe’, with the ability to steal text messages, intercept phone calls, and other malware such as ‘XXXX.apk’ uses WiFi networks or hotspots to steal information, infected more than 24,000 Devices. But it should not be...

Design/Logic Flaw

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection...

CVE-2013-7000

CVE-2013-7000 affects the Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26. The vulnerability allows remote attackers to cause a denial of service by sending a malformed MM4 message over the MM4 connection, impacting availability. Affected component: MMSC in NowSMS. R...

CVE-2013-7000

The Multimedia Messaging Centre MMSC in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection...

CVE-2013-7001

CVE-2013-7001 concerns NowSMS Now SMS & MMS Gateway prior to 2013.11.15. The MMSC may trigger a denial of service when processing a malformed MM1 message that is routed to a MM4 or MM7 connection. Affected component: Multimedia Messaging Centre (MMSC) in NowSMS gateway. Underlying cause: malforme...

Threat Outbreak Alert: Fake MMS Notification Email Messages on August 14, 2013

Medium Alert ID: 30201 First Published: 2013 July 23 19:31 GMT Last Updated: 2013 August 14 13:17 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The email attempts to convince the recipient to...

[CVE-2013-4763|CVE-2013-4764] Vulnerability in built-in system app of Samsung Galaxy S3/S4

Hi list, I would like to inform you that the details of the vulnerability in built-in system app of Samsung Galaxy S3/S4 assigned as CVE-2013-4763 and CVE-2013-4764 are now disclosed to public. In Samsung Galaxy S3/S4, a pre-loaded app, i.e., sCloudBackupProvider.apk, is used to provide backup...

CentOS 4 : wireshark (CESA-2007:0709)

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

SuSE 11.2 Security Update : wireshark (SAT Patch Number 7490)

wireshark has been updated to 1.8.6 which fixes bugs and security issues : Vulnerabilities fixed : - The TCP dissector could crash. wnpa-sec-2013-10. CVE-2013-2475 - The HART/IP dissectory could go into an infinite loop. wnpa-sec-2013-11. CVE-2013-2476 - The CSN.1 dissector could crash...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 8500)

wireshark has been updated to 1.6.14 to fix bugs and security issues : Vulnerabilities fixed : - The sFlow dissector could go into an infinite loop. wnpa-sec-2012-32 CVE-2012-6054: The SCTP dissector could go into an infinite loop. wnpa-sec-2012-33 CVE-2012-6056: The MS-MMS dissector could crash...

Debian DSA-2644-1 : wireshark - several vulnerabilities

Multiple vulnerabilities were discovered in the dissectors for the MS-MMS, RTPS, RTPS2, Mount, ACN, CIMD and DTLS protocols, which could result in denial of service or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Wireshark 1.8.x < 1.8.6 Multiple Vulnerabilities

The installed version of Wireshark 1.8 is earlier than 1.8.6. It is, therefore, affected by the following vulnerabilities : - Errors exist in the CSN.1, CIMD, DTLS, Mount, MS-MMS, RTPS, RTPS2, and TCP dissectors that could allow them to crash. Bugs 8274, 8332, 8335, 8346, 8380, 8382 - Errors exis...

Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 (Mac OS X)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnmar13macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 Mac OS X Authors: Arun...

DEBIAN-CVE-2013-2478

The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...

Integer overflow

The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...

CVE-2013-2478

The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...

UBUNTU-CVE-2013-2478

The dissectserverinfo function in epan/dissectors/packet-ms-mms.c in the MS-MMS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not properly manage string lengths, which allows remote attackers to cause a denial of service application crash via a malformed packet that 1...

CVE-2013-2478

CVE-2013-2478 concerns the MS-MMS dissector in Wireshark, where epan/dissectors/packet-ms-mms.c mishandles string lengths, allowing a remote attacker to crash the application (denial of service) via a malformed packet that overflows an integer or contains embedded NULLs. The issue affects Wiresha...