CVE-2014-2892

Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

6.15% chance of exploitation in the next 30 days, 93th percentile

Published

2014-04-22

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://sourceforge.net/p/libmms/code/ci/03bcfccc22919c72742b7338d02859962861e0e8

References

• CVE Record
• NVD entry

Related

• CVE-2014-2880
• CVE-2014-2908
• CVE-2014-2879
• CVE-2014-2913
• CVE-2014-2851
• CVE-2014-2921