Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2013-7000: Now SMS & MMS Gateway can crash from bad MMS
CVE-2013-7000 · published 12 years ago
Summary
The Now SMS & MMS Gateway 2013.09.26 can stop working if it receives a specially crafted multimedia message over its MM4 connection. This denial of service could interrupt text and picture messaging for users. Apply the vendor's update or block malformed MM4 traffic to prevent the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| nowsms | now_sms_\&_mms_gateway |
2013.09.26 cpe:2.3:a:nowsms:now_sms_\&_mms_gateway:2013.09.26:*:*:*:*:*:*:* |
Original advisory text
The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection.
The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection.
References
- http://secunia.com/advisories/55805 Vendor Advisory
- http://www.nowsms.com/nowsms20131115 Vendor Advisory
- http://www.securityfocus.com/bid/63879
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
4.3
Medium
Type
CWE-20Improper Input Validation
Timeline
Published7 Dec 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-7000 · NVD
Track software like this
Free during beta