CVE-2007-1578

Description

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory