Description
Inbit Messenger versions 4.6.0 to 4.9.0 contain a remote stack-based buffer overflow vulnerability that allows unauthenticated attackers to execute arbitrary code by sending malformed network packets. Attackers can craft a specially designed payload targeting the messenger's network handler to overwrite the Structured Exception Handler (SEH) and execute shellcode on vulnerable Windows systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Inbit | Inbit Messenger | 4.6.0 – ≤ 4.9.0 | — |
References
- ExploitDB-51126 exploit
- Archived Software Download Page product
- Exploit Write-Up technical-description
- VulnCheck Advisory: Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow third-party-advisory