A new way of MMS vulnerability detection based on virtual machine

Abstract

As the Multimedia Messaging Service (MMS) is becoming more popular, they become a attractive target for attacker. Unfortunately, at present, there are few tools to analyze the vulnerability of MMS because of the different kinds of agents and the communications trouble of Mobile and PC. This paper presents a novel approach to solve these problem. Our approach implement a virtual machine to simulate MMS system. It could construct a fuzzer to send wellconnected data to agent to make overflow. Furthermore, this method provides a great deal of API for invoking which could help analyzer get more detail of the mobile. In addition, we show a new way to fuzzing MMS under the Cross-Platform condition. Empirical testing indicates that our approach can detect the vulnerability of MMS effectively.