MM
Product
Msn Messenger
11
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Msn Messenger to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-2931 | – | Aug 31 | Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified… Affected: 6.2; 7.0; 7.5 |
| CVE-2007-3436 | – | Jun 27 | Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption) via a flood of SIP INVITE requests to the port specified for… Affected: 4.7 |
| CVE-2006-0363 | – | Jan 22 | The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key,… Affected: 7.5 |
| CVE-2005-0562 | – | Apr 12 | GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width Affected: 6.2 |
| CVE-2004-0597 | – | Nov 23 | Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the… Affected: 6.1; 6.2 |
| CVE-2004-0122 | – | Apr 15 | Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files Affected: 6.0; 6.1 |
| CVE-2002-1831 | – | Dec 31 | Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the… Affected: 1.0; 2.0; 2.2; 3.0; 3.6; 4.0; +2 more |
| CVE-2002-1698 | – | Dec 31 | Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long FN (font) argument in the message header Affected: 1.0; 2.0; 2.2; 3.0; 3.6; 4.0; +2 more |
| CVE-2002-0472 | – | Aug 12 | MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from… Affected: 3.6 |
| CVE-2002-0155 | – | May 29 | Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute… Affected: 4.5; 4.6 |
| CVE-2002-0228 | – | May 16 | Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation,… Affected: 2.2; 3.0; 4.0; 4.5; 4.6 |
Showing 11