PT-2006-4972 · Arcsoft · Arcsoft Mms Composer

Collin R. Mulliner + 1 · Published 2006-08-14 · Updated 2018-10-17 · CVE-2006-4131

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ArcSoft MMS Composer versions 1.5.5.6 and earlier ArcSoft MMS Composer versions 2.0.0.13 and earlier

Description The issue is related to multiple buffer overflows that can be triggered by crafted MMS messages. These overflows occur in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers, allowing remote attackers to cause a denial of service (crash) or execute arbitrary code.

Recommendations For ArcSoft MMS Composer versions 1.5.5.6 and earlier, consider disabling the M-Notification.ind, M-Retrieve.conf, and SMIL parsers until a patch is available. For ArcSoft MMS Composer versions 2.0.0.13 and earlier, consider disabling the M-Notification.ind, M-Retrieve.conf, and SMIL parsers until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4131

Affected Products

Arcsoft Mms Composer

References · 12

• 🔥 https://exploit-db.com/exploits/28368 · Exploit
• 🔥 https://exploit-db.com/exploits/2156 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4131 · Security Note
• http://secunia.com/advisories/21426 · Vendor Advisory
• http://arcsoft.com/support/downloads/download_patches/mms.asp · Patch
• http://mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf · Note
• http://securityfocus.com/archive/1/442841/100/0/threaded · Note
• http://securityfocus.com/bid/19451 · Note
• http://securityreason.com/securityalert/1387 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28342 · Note
• http://vupen.com/english/advisories/2006/3261 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html · Note