PT-2005-3710 · Indiatimes · Indiatimes Messenger

Gregory R. Panakkal · Publicado 2005-09-08 · Atualizado 2017-07-11 · CVE-2005-2844

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Indiatimes Messenger version 6.0

Description The issue is related to a buffer overflow in the MMClient.exe component, which can be triggered by a long group name argument to the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object. This can cause a denial of service, resulting in an application crash, and potentially allow the execution of arbitrary code.

Recommendations For Indiatimes Messenger version 6.0, consider disabling the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object as a temporary workaround to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-2844

Produtos afetados

Indiatimes Messenger

Referências · 7

• 🔥 https://exploit-db.com/exploits/26216 · Exploit
• 🔥 http://securitytracker.com/id?1014842 · Exploit
• 🔥 http://securityfocus.com/bid/14705 · Exploit
• http://marc.info/?l=bugtraq&m=112550635826169&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2844 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22110 · Nota
• http://secunia.com/advisories/16633 · Aviso do Fabricante