Microsoft

Windows Live Messenger

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2010-0278

Exploit
  • EPSS 24.13%
  • Veröffentlicht 12.01.2010 17:30:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile metho...

5

CVE-2009-0647

  • EPSS 18.58%
  • Veröffentlicht 19.02.2009 16:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service (application crash) via a modified header in a packet, as possibly demonstrated by a UTF-8.0 valu...

5

CVE-2008-5828

  • EPSS 17.86%
  • Veröffentlicht 02.01.2009 19:30:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) ...

5

CVE-2008-5179

  • EPSS 30.15%
  • Veröffentlicht 20.11.2008 15:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service (crash) via a crafted Real-time Transport Control Protocol (RTCP) receiver...

4.3

CVE-2007-5144

  • EPSS 16.33%
  • Veröffentlicht 01.10.2007 05:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service (application crash or system crash) and possibly execute arbitrary code by placing a mal...

9.3

CVE-2007-2931

Exploit
  • EPSS 77.98%
  • Veröffentlicht 31.08.2007 22:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat se...

4.3

CVE-2006-6252

  • EPSS 12.87%
  • Veröffentlicht 04.12.2006 11:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.

5.1

CVE-2006-3250

Exploit
  • EPSS 19.86%
  • Veröffentlicht 27.06.2006 18:05:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.