Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1831
microsoft
msn messenger
service
1.0
4.6
denial of service
vulnerability
nvd
cve-2002-1831
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.421 Medium
EPSS
Percentile
97.3%
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.
Affected configurations
Node
microsoftmsn_messengerMatch1.0
ORmicrosoftmsn_messengerMatch2.0
ORmicrosoftmsn_messengerMatch2.2
ORmicrosoftmsn_messengerMatch3.0
ORmicrosoftmsn_messengerMatch3.6
ORmicrosoftmsn_messengerMatch4.0
ORmicrosoftmsn_messengerMatch4.5
ORmicrosoftmsn_messengerMatch4.6
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.421 Medium
EPSS
Percentile
97.3%
Related for CVE-2002-1831