Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2892
HistoryApr 22, 2014 - 12:00 a.m.

CVE-2014-2892

2014-04-2200:00:00
ubuntu.com
ubuntu.com
5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.209 Low

EPSS

Percentile

96.4%

Heap-based buffer overflow in the get_answer function in mmsh.c in libmms
before 0.6.4 allows remote attackers to execute arbitrary code via a long
line in an MMS over HTTP (MMSH) server response.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlibmms< 0.6.2-2ubuntu0.1UNKNOWN
ubuntu14.04noarchlibmms< 0.6.2-3ubuntu2.1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.209 Low

EPSS

Percentile

96.4%