Buffer overflow in Lan Messenger Messenger1.2.28

CVE-2012-3845

Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a long string in an initiation request.

Vulnerability class: Buffer Overflow

EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2012-3845?
CVE-2012-3845 is a vulnerability in Lan Messenger Messenger1.2.28, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2012-07-03.
Is CVE-2012-3845 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.