Description
ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service (resource exhaustion and application crash) via WAPPush messages to UDP port UDP 2948.
References
- 19451 vdb-entry
- mmscomposer-wappush-dos(28344) vdb-entry
- 1387 third-party-advisory
- 2156 exploit
- 20060810 PocketPC MMS - Remote Code Injection/Execution Vulnerability andDenial-of-Service mailing-list
- http://www.arcsoft.com/support/downloads/download_patches/mms.asp
- 20060809 PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service mailing-list
- http://www.mulliner.org/pocketpc/CollinMulliner_defcon14_pocketpcphones.pdf
- 21426 third-party-advisory