← back
CVE-2007-1578

CVE-2007-1578

EPSS 16.3%
Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/3527unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0280.htmlhttp://secunia.com/advisories/24596http://securitytracker.com/id?1017798https://exchange.xforce.ibmcloud.com/vulnerabilities/33120https://www.exploit-db.com/exploits/3527http://www.digit-labs.org/files/exploits/mercur-v1.plhttp://www.osvdb.org/33545http://www.securityfocus.com/bid/23058http://www.vupen.com/english/advisories/2007/1053