CVE-2007-1578 Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that...
HighCVSS 10.0
EPSS 16.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atrium software mercur imapd | = 5.00.14-sp4 | No fix listed |
References
- 20070320 Mercur SP4 IMAPD exploit mailing-list
- 24596 third-party-advisory
- 1017798 exploit vdb-entry vendor-advisory
- www.digit-labs.org exploit
- 33545 vdb-entry
- 23058 exploit vdb-entry vendor-advisory
- ADV-2007-1053 vdb-entry
- mercur-imap-ntlm-bo(33120) vdb-entry
- 3527 exploit