Windows Live Messenger (Microsoft) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2010-01-12. Vendor: Microsoft.

CVEs of Windows Live Messenger

• CVE-2010-0278 - CVSS 4.3 (medium), 2010-01-12: A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote…
• CVE-2009-0647 - CVSS 5 (medium), 2009-02-19: msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service…
• CVE-2008-5828 - CVSS 5 (medium), 2009-01-02: Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to…
• CVE-2008-5179 - CVSS 5 (medium), 2008-11-20: Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote attackers to cause a…
• CVE-2007-5144 - CVSS 4.3 (medium), 2007-10-01: Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of…
• CVE-2007-2931 - CVSS 9.3 (critical), 2007-08-31: Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary…
• CVE-2006-6252 - CVSS 4.3 (medium), 2006-12-04: Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption)…
• CVE-2006-3250 - CVSS 5.1 (medium), 2006-06-27: Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file,…