CVE-2006-4131
ArcSoft MMS Composer < 1.5.5.6 - Buffer Overflow via Crafted MMS Messages
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-4131. PoCs published by Collin Mulliner, Collin R. Mulliner.
AI-analyzed exploit summary This is a Proof-of-Concept tool demonstrating a flood/crash vulnerability in PocketPC MMS Composer via UDP port 2948. It sends MMS new message notifications to target devices, causing denial-of-service conditions or crashes.
Description
Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.
Exploits (2)
This is a Proof-of-Concept tool demonstrating a flood/crash vulnerability in PocketPC MMS Composer via UDP port 2948. It sends MMS new message notifications to target devices, causing denial-of-service conditions or crashes.
The provided text describes vulnerabilities in ArcSoft MMS Composer, including buffer overflow and DoS issues, but does not contain actual exploit code. It references a binary exploit archive without further details.