Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

CVE-2013-7000: Now SMS & MMS Gateway can crash from bad MMS

CVE-2013-7000 · published 12 years ago
Summary

The Now SMS & MMS Gateway 2013.09.26 can stop working if it receives a specially crafted multimedia message over its MM4 connection. This denial of service could interrupt text and picture messaging for users. Apply the vendor's update or block malformed MM4 traffic to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nowsms now_sms_\&_mms_gateway 2013.09.26
cpe:2.3:a:nowsms:now_sms_\&_mms_gateway:2013.09.26:*:*:*:*:*:*:*
Original advisory text
The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection.
The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published7 Dec 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-7000 · NVD
Track software like this
Free during beta