CyberSec.Space Logo
Back to CVE Browser

CVE-2007-1578

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1040%
EPSS Percentile13.49th
PublishedMar 21, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.

Affected Platforms (CPE)

📦
Atrium Software

Mercur Imapd

= 5.00.14

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0280.html
🔗 http://secunia.com/advisories/24596
🔗 http://securitytracker.com/id?1017798
🔗 http://www.digit-labs.org/files/exploits/mercur-v1.pl
🔗 http://www.osvdb.org/33545
🔗 http://www.securityfocus.com/bid/23058
🔗 http://www.vupen.com/english/advisories/2007/1053
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/33120

Related Vulnerabilities

CVE-2003-132210.0

Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execut...

CVE-2007-157910.0

Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE comma...

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...

CVE-2007-005710.0

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a sh...