Gregory R. Panakkal has discovered a vulnerability in Indiatimes Messenger, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in handling overly long group names when renaming an existing group. This can be exploited to cause a heap-based buffer overflow via the "RenameGroup()" function called from the MMClient.MunduMessenger ActiveX control.

Successful exploitation requires that the user is tricked into visiting a malicious web site and also requires that the user has logged in to the Messenger (e.g. using auto logon).

The vulnerability has been confirmed in version 6.0. Other versions may also be affected.

Solution
Restrict use of ActiveX controls to trusted web sites only.

Provided and/or discovered by
Gregory R. Panakkal

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area