CVE:CVE-2007-3959
CNNVD:CNNVD-200707-408
Ipswitch Instant Messaging是Ipswitch协作组件中所捆绑的即时消息软件。
Ipswitch IM在处理畸形的消息时存在漏洞，远程攻击者可能利用此漏洞导致服务崩溃。
如果攻击者在5179端口上创建了到IM Server服务的TCP会话，就可以通过发送畸形消息导致服务守护程序崩溃，崩溃的服务无法自动重启。可通过以下函数到达有漏洞的代码：
  DoAttachVideoSender
  DoAttachVideoReceiver
  DoAttachAudioSender
  DoAttachAudioReceiver
solution:Upgrade ipswitch imserver to a higher version than 2.0.5.30,and avoid the version 2.0.5.30; Upgrade ipswitch ipswitch_collaboration_suite to a higher version than 2.07,and avoid the version (,2.07]