Unscored severity · published Aug 31, 2007
CVE-2007-2931
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified…
–
CVSS
55.5%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.
Exploitation
Is it being used?
Exploit prediction (EPSS)55.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Msn Messenger · Microsoft
6.2; 7.0; 7.5 · source: NVD
WL
Windows Live Messenger · Microsoft
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2931
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2931
osvdb.org
http://osvdb.org/40126
Vendor Advisory
http://secunia.com/advisories/26570
US Government Resource
http://www.kb.cert.org/vuls/id/166521
Exploit
http://www.securityfocus.com/bid/25461
www.securitytracker.com
http://www.securitytracker.com/id?1018622
Exploit
http://www.team509.com/modules.php?name=News&file=article&sid=50
More from Msn Messenger
–
CVE-2007-3436
Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption) via a flood of SIP INVITE requests to the port specified for…
–
CVE-2006-0363
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key,…
–
CVE-2005-0562
GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width
–
CVE-2004-0597
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the…
–
CVE-2004-0122
Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files