CVE

Id
20235  
CVE No.
CVE-2006-4131  
Status
Candidate  
Description
Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187654 20235 CVE-2006-4131 BUGTRAQ:20060810 PocketPC MMS - Remote Code Injection/Execution Vulnerability andDenial-of-Service  View
187655 20235 CVE-2006-4131 URL:http://www.securityfocus.com/archive/1/archive/1/442841/100/0/threaded  View
187656 20235 CVE-2006-4131 FULLDISC:20060809 PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service  View
187657 20235 CVE-2006-4131 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html  View
187658 20235 CVE-2006-4131 MISC:http://www.arcsoft.com/support/downloads/download_patches/mms.asp  View
187659 20235 CVE-2006-4131 MILW0RM:2156  View
187660 20235 CVE-2006-4131 URL:http://milw0rm.com/exploits/2156  View
187661 20235 CVE-2006-4131 MISC:http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf  View
187662 20235 CVE-2006-4131 BID:19451  View
187663 20235 CVE-2006-4131 URL:http://www.securityfocus.com/bid/19451  View
187664 20235 CVE-2006-4131 VUPEN:ADV-2006-3261  View
187665 20235 CVE-2006-4131 URL:http://www.vupen.com/english/advisories/2006/3261  View
187666 20235 CVE-2006-4131 SECUNIA:21426  View
187667 20235 CVE-2006-4131 URL:http://secunia.com/advisories/21426  View
187668 20235 CVE-2006-4131 SREASON:1387  View
187669 20235 CVE-2006-4131 URL:http://securityreason.com/securityalert/1387  View
187670 20235 CVE-2006-4131 XF:mmscomposer-message-bo(28342)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60755 JVNDB-2006-003021 SAP IGS におけるヒープベースのバッファオーバーフローの脆弱性 SAP Internet Graphics Service (IGS) には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-4133 20235 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003021.html  View