microsoft msn messenger service vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote malicious users to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.

Microsoft Msn Messenger Service For Exchange 4.5 Microsoft Msn Messenger Service For Exchange 4.6 Microsoft Msn Chat Control Microsoft Msn Messenger 4.5 Microsoft Msn Messenger 4.6

5

CVSSv2

Microsoft MSN Messenger Service 1.0 up to and including 4.6 allows remote malicious users to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.

Microsoft Msn Messenger 2.0 Microsoft Msn Messenger 3.0 Microsoft Msn Messenger 3.6 Microsoft Msn Messenger 4.0 Microsoft Msn Messenger 4.5 Microsoft Msn Messenger 4.6 Microsoft Msn Messenger 1.0 Microsoft Msn Messenger 2.2

1 EDB exploit

5

CVSSv2

Buffer overflow in Microsoft MSN Messenger Service 1.0 up to and including 4.6 allows remote malicious users to cause a denial of service (crash) via a long FN (font) argument in the message header.

Microsoft Msn Messenger 3.0 Microsoft Msn Messenger 3.6 Microsoft Msn Messenger 1.0 Microsoft Msn Messenger 2.0 Microsoft Msn Messenger 2.2 Microsoft Msn Messenger 4.0 Microsoft Msn Messenger 4.5 Microsoft Msn Messenger 4.6

5

CVSSv2

Microsoft MSN Messenger allows remote malicious users to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reporte...

Microsoft Msn Messenger Service

5

CVSSv2

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote malicious users to spoof messages from other users.

Microsoft Msn Messenger 3.6

7.5

CVSSv2

Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote malicious user to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.

Microsoft Msn Setup Bulletin Board Services 4.71.0.10

1 EDB exploit

5

CVSSv2

Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote malicious users to cause a denial of service (crash) via an image with an ICC Profile with a large Tag Count.

Microsoft Internet Explorer 6.0 Microsoft Live Messenger 9.0

4.3

CVSSv2

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote malicious users to cause a denial of service (application crash or system crash) and possibly execute arbitrary code by placing a malformed file in a new fol...

Microsoft Windows Live Messenger 8.1

4.3

CVSSv2

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote malicious users to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argumen...

Microsoft Windows Live Messenger 2009

1 EDB exploit

5

CVSSv2

Microsoft MSN Messenger 4.7 on Windows XP allows remote malicious users to cause a denial of service (resource consumption) via a flood of SIP INVITE requests to the port specified for voice conversation.

Microsoft Msn Messenger 4.7

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook