Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mercur_imapd | Atrium_software | 5.00.14-sp4 (including) | 5.00.14-sp4 (including) |