Msn Messenger (Microsoft) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2007-08-31. Vendor: Microsoft.
CVEs of Msn Messenger
- CVE-2007-2931 - CVSS 9.3 (critical), 2007-08-31: Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary…
- CVE-2007-3436 - CVSS 5 (medium), 2007-06-27: Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption) via a flood of SIP INVITE requests to…
- CVE-2006-0363 - CVSS 2.1 (low), 2006-01-22: The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the…
- CVE-2005-0562 - CVSS 7.5 (high), 2005-04-12: GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper…
- CVE-2004-0597 - CVSS 10 (critical), 2004-11-23: Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images…
- CVE-2004-0122 - CVSS 5 (medium), 2004-04-15: Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.
- CVE-2002-1831 - CVSS 5 (medium), 2002-12-31: Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded…
- CVE-2002-1698 - CVSS 5 (medium), 2002-12-31: Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long FN (font) argument…
- CVE-2002-0472 - CVSS 5 (medium), 2002-08-12: MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to…
- CVE-2002-0155 - CVSS 7.5 (high), 2002-05-29: Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote…
- CVE-2002-0228 - CVSS 5 (medium), 2002-05-16: Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and…
