Seunghyun Seo MSN666 Remote Buffer Overflow Vulnerability

Bugtraq ID:	5015
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 14 2002 12:00AM
Updated:	Jun 14 2002 12:00AM
Credit:	Discovered by [email protected].
Vulnerable:	Seunghyun Seo MSN666 1.0.1 Seunghyun Seo MSN666 1.0
Not Vulnerable:

Seunghyun Seo MSN666 Remote Buffer Overflow Vulnerability

MSN666 is a utility for sniffing MSN Messenger traffic on a local network, implemented by Seunghyun Seo. A vulnerability has been reported in some versions of MSN666.

Malformed MSN traffic may overflow a fixed width buffer in MSN666. It is likely that stack memory may be modified. Exploitation may lead to the execution of arbitrary code as the MSN666 process.

Seunghyun Seo MSN666 Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Seunghyun Seo MSN666 Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Seunghyun Seo MSN666 Remote Buffer Overflow Vulnerability

References:

• MSN666 Homepage (Seunghyun Seo)