Lucene search
HistoryDec 04, 2006 - 11:28 a.m.
CVE-2006-6252
microsoft
windows
live messenger
cve-2006-6252
denial of service
cpu consumption
gestual emoticons
remote attackers
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.3%
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of “:D” sequences, which are interpreted as emoticons.
Affected configurations
Node
microsoftwindows_live_messengerRange≤8.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_live_messenger | microsoft windows live messenger | le | 8.0 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.9 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.3%
Related for CVE-2006-6252