Unscored severity · published May 29, 2002
CVE-2002-0155
Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute…
–
CVSS
24.1%
EPSS
No
On KEV
Description
Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.
Exploitation
Is it being used?
Exploit prediction (EPSS)24.1% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Msn Chat Control · Microsoft
All versions, or not specified · source: NVD
MM
Msn Messenger · Microsoft
4.5; 4.6 · source: NVD
MM
Msn Messenger Service For Exchange · Microsoft
4.5; 4.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0155
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0155
marc.info
http://marc.info/?l=bugtraq&m=102089960531919&w=2
US Government Resource
http://www.cert.org/advisories/CA-2002-13.html
www.iss.net
http://www.iss.net/security_center/static/9041.php
www.securityfocus.com
http://www.securityfocus.com/bid/4707
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022