CVE-2007-3959

MEDIUM 5.0CVE-2007-3959 · Published 24/07/2007 · updated 16/06/2026

In short

CVE-2007-3959 is a MEDIUM (CVSS 5.0) vulnerability affecting imserver (ipswitch), ipswitch collaboration suite (ipswitch).
Chance of exploitation in the next 30 days (EPSS): 6.5%, higher than 93.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
imserver ipswitch	`= 2.0.5.30`	No fix yet
ipswitch collaboration suite ipswitch	`≤ 2.07`	No fix yet

Description

The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Patch
secunia.com/advisories/26154 · Patch
ipswitch.com/support/instant_messaging/patch-upgrades.asp · Patch
securityfocus.com/bid/25031 · Patch
securitytracker.com/id
vupen.com/english/advisories/2007/2621

More vulnerabilities in imserver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free