Lucene search

[email protected]CVE-2002-1698

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1698

2002-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-1698

microsoft

msn messenger

buffer overflow

denial of service

nvd

remote attack

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long FN (font) argument in the message header.

CPENameOperatorVersion
microsoft:msn_messengermicrosoft msn messengereq4.6
microsoft:msn_messengermicrosoft msn messengereq2.2
microsoft:msn_messengermicrosoft msn messengereq2.0
microsoft:msn_messengermicrosoft msn messengereq1.0
microsoft:msn_messengermicrosoft msn messengereq3.6
microsoft:msn_messengermicrosoft msn messengereq4.0
microsoft:msn_messengermicrosoft msn messengereq4.5
microsoft:msn_messengermicrosoft msn messengereq3.0

CPE	Name	Operator	Version
microsoft:msn_messenger	microsoft msn messenger	eq	4.6
microsoft:msn_messenger	microsoft msn messenger	eq	2.2
microsoft:msn_messenger	microsoft msn messenger	eq	2.0
microsoft:msn_messenger	microsoft msn messenger	eq	1.0
microsoft:msn_messenger	microsoft msn messenger	eq	3.6
microsoft:msn_messenger	microsoft msn messenger	eq	4.0
microsoft:msn_messenger	microsoft msn messenger	eq	4.5
microsoft:msn_messenger	microsoft msn messenger	eq	3.0

References

online.securityfocus.com/archive/1/271130

www.securityfocus.com/bid/4675

exchange.xforce.ibmcloud.com/vulnerabilities/9014

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON