Full Disclosure mailing list archives
[HV-LOW] Microsoft NetMeeting memory corruption (Brief)
From: vuln () hexview com
Date: Tue, 6 Jun 2006 17:27:53 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Microsoft NetMeeting memory corruption (Brief) Classification: =============== Level: [LOW]-med-high-crit ID: HEXVIEW*2006*06*06*01 URL: http://www.hexview.com/docs/20060606-1.txt Overview: ========= Microsoft NetMeeting is an application that provides multipoint audio/video conferencing and supporting services (desktop sharing, whiteboard, remote control, file transfer) for Microsoft Windows platform. Affected products: ================== All tests were performed using Microsoft NetMeeting 3.01 No other products were tested. Vulnerability Summary: ====================== The application insufficiently validates received data opening a possibility to overwrite portions of application memory causing exceptions ranging from null-pointer access to a possible code execution. At the time of writing there is no working exploit. HexView tests confirmed that it is possible to remotely terminate an active NetMeeting presentation by either crashing the hosting application or causing it to consume 100% of CPU resources. Vendor Status: ============== Microsoft was notified on June 4th, 2005 and is supposedly investigating the issue. HexView will release more details about the vulnerability in a separate disclosure. About HexView: ============== HexView contributes to online security-related lists for over a decade. The scope of our expertise spreads over Windows, Linux, Sun, MacOS platforms, network applications, and embedded devices. We also offer a variety of consulting services. For more information visit http://www.hexview.com Distribution: ============= This document may be freely distributed through any channels as long as the contents are kept unmodified. Commercial use of the information in the document is not allowed without written permission from HexView signed by our pgp key. Please direct all questions to vtalk () hexview com Feedback and comments: ====================== Feedback and questions about this disclosure are welcome at vtalk () hexview com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFEhhzMDPV1+KQrDqQRAr8RAJkByW0oaLkx8gxDcF1mJXnNME0+DwCeJyDk C7CXaRx8ms20h43YBANw9sM= =DTLx -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- [HV-LOW] Microsoft NetMeeting memory corruption (Brief) vuln (Jun 06)