CVE-2004-1574

Vulnerability

A buffer overflow vulnerability exists in Vypress Messenger versions 3.5.1 and earlier [1][2]. The bug resides in a visualization function that processes incoming messages. When the first field of a message exceeds 776 characters, a buffer overflow occurs, corrupting memory and allowing arbitrary code execution [1][2].

Exploitation

An attacker can exploit this vulnerability by sending a specially crafted message to a broadcast address on the local network [1][2]. No authentication is required, and the attacker only needs network access to the LAN where Vypress Messenger is running. The malicious message triggers the overflow when the recipient's client attempts to display the message [1][2].

Impact

Successful exploitation allows the attacker to execute arbitrary code on the target system with the privileges of the Vypress Messenger process [1][2]. This can lead to full compromise of the affected host, including data theft, installation of malware, or further lateral movement within the network.

Mitigation

The vendor released version 4.0 RC1 as a fix for this vulnerability [1][2]. Users should upgrade to this version or later. No workarounds are documented. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.