CVE-2014-2892: Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an…

PriorityP346high7.5CVSS 2.0

AVNACLAuNCPIPAP

EPSS

6.10%

92.5th percentile

Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	libmms	< libmms 0.6.2-4 (bookworm)	libmms 0.6.2-4 (bookworm)
libmms_project	libmms	<= 0.6.3	—
libmms_project	libmms	—	—
libmms_project	libmms	—	—
libmms_project	libmms	—	—
libmms_project	libmms	>= 0 < 0.6.2-4	0.6.2-4
libmms_project	libmms	>= 0 < 0.6.2-4	0.6.2-4
libmms_project	libmms	>= 0 < 0.6.2-4	0.6.2-4
libmms_project	libmms	>= 0 < 0.6.2-4	0.6.2-4

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

osv7.5HIGH

vendor_debian7.5HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.