CVE-2014-2892
EPSS 5.1%libmms - security update
發布日:2014/4/22修改日:2026/4/28
也稱為:DEBIAN-CVE-2014-2892
描述
Heap-based buffer overflow in the get_answer function in mmsh.c in libmms before 0.6.4 allows remote attackers to execute arbitrary code via a long line in an MMS over HTTP (MMSH) server response.
受影響套件(2)
- Debian/libmmsfrom 0, < 0.6.2-4
- Debian/libmmsfrom 0, < 0.6-1+squeeze2