← Database

CVE-2007-1578

CRITICAL CVSS: 10.0 Published: 2007-03-21 Modified: 2026-06-16

Description

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.

Affected Platforms

Atrium Software Mercur Imapd

Weakness Type

NVD-CWE-Other

References