CVE-2006-4131: Arcsoft Mms Composer

High severity, CVSS 7.5. EPSS: 8.9% chance of exploitation in the next 30 days.

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.

Affected products

• Arcsoft Mms Composer: up to and including 1.5.5.6; up to and including 2.0.0.13

Published 2006-08-14. Last modified 2026-06-16.