PT-2005-3710 · Indiatimes · Indiatimes Messenger

Gregory R. Panakkal · Published 2005-09-08 · Updated 2017-07-11 · CVE-2005-2844

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Indiatimes Messenger version 6.0

Description The issue is related to a buffer overflow in the MMClient.exe component, which can be triggered by a long group name argument to the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object. This can cause a denial of service, resulting in an application crash, and potentially allow the execution of arbitrary code.

Recommendations For Indiatimes Messenger version 6.0, consider disabling the RenameGroup function in the MMClient.MunduMessenger.1 ActiveX object as a temporary workaround to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-2844

Affected Products

Indiatimes Messenger

References · 7

• 🔥 https://exploit-db.com/exploits/26216 · Exploit
• 🔥 http://securitytracker.com/id?1014842 · Exploit
• 🔥 http://securityfocus.com/bid/14705 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2844 · Security Note
• http://secunia.com/advisories/16633 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112550635826169&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22110 · Note