CVE-2006-3669

CVE-2006-3669 affects Mercury Messenger (potentially 1.7.1.1 and other versions) on multi-user Mac OS X. The vulnerability arises because chat logs are stored with world-readable permissions within the /Users directory, allowing local users to read other users’ logs. The NVD entry lists a LOW bas...

Security Best Practice: Blocking MSN Messenger

Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance.Windows Live Messenger, formerly and still...

CentOS 3 / 4 : gaim (CESA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3298

CVE-2006-3298 affects Yahoo! Messenger versions 7.5.0.814 and 7.0.438. The vulnerability allows remote attackers to cause a crash in jscript.dll by sending messages containing non-ASCII characters. The NVD entry, with CVSS v2 base score 5.0 (Medium), lists network access, no authentication, and p...

CLexploits.ctt.txt

Windows Live Messenger 8.0 Contact List .ctt Heap Overflow /////////////////////////////////////////////// // by: JAAScois // www.jaascois.com 25/06/2006 // // Exploit at: 0x0076228A = kernel32.FormatMessageW // Example: // download .ctt file :...

CVE-2006-3250

Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List .ctt file, which triggers the overflow when it is imported by the user...

CVE-2006-3250

Windows Live Messenger 8.0 is affected by a heap-based buffer overflow in the handling of imported Contact List (.ctt) files. The flaw can allow user-assisted attackers to execute arbitrary code when a crafted .ctt file is imported by the user. The vulnerable component is the messenger client’s i...

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

AOL Instant Messenger NSS Library Memory Leak Vulnerability

Description: AOL Instant Messenger AIM is susceptible to affected to DoS-type memory leak vulnerability disclosed in Mozilla Network Security Services library implementation. This library is shipped with the AIM 5.9 utility. Reportedly the Network Security Services NSS library will leak 256 bytes...

PT-2006-4144 · Microsoft · Windows Live Messenger

Name of the Vulnerable Software and Affected Versions: Windows Live Messenger version 8.0 Description: A heap-based buffer overflow issue allows user-assisted attackers to execute arbitrary code via a crafted Contact List .ctt file. This overflow is triggered when the crafted file is imported by...

Microsoft Windows Live Messenger buffer overflow

Heap overflow on .ctt file import...

Windows Live Messenger 8.0 Heap Overflow

Windows Live Messenger 8.0 Contact List .ctt Heap Overflow /////////////////////////////////////////////// // by: JAAScois // www.jaascois.com 25/06/2006 // // Exploit at: 0x0076228A = kernel32.FormatMessageW // Example: // download .ctt file :...

Yahoo! Messenger <= 7.5.0.184 Multiple Vulnerabilities

Binary data 3665.prm...

Yahoo! Messenger 7.0/7.5 - 'jscript.dll' Non-ASCII Character Denial of Service

source: https://www.securityfocus.com/bid/18622/info Yahoo! Messenger is prone to a denial-of-service vulnerability. Successful exploitation will cause the application to crash, effectively denying service. This issue affects version 7.5.0.814; other versions may also be vulnerable. The following...

Yahoo! Messenger 7.07.5 - jscript.dll Non-ASCII Character Denial of Service

Yahoo! Messenger 7.07.5 - jscript.dll Non-ASCII Character Denial of Service source: https://www.securityfocus.com/bid/18622/info Yahoo! Messenger is prone to a denial-of-service vulnerability. Successful exploitation will cause the application to crash, effectively denying service. This issue...

Yahoo messenger bug

Hi, I found a vulnerability in yahoo messenger that if you receive a Private message with this string "msg:---------------------------------------------iframe onload=$InlineAction:"without quotesYahoo messenger will Crash with a runtime error. Remote crash proof of concept: 1. Open messenger and...

V3 Chat Instant Messenger - expire.php?cust_name Cross-Site Scripting

V3 Chat Instant Messenger - expire.php?custname Cross-Site Scripting source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitiz...

V3 Chat Instant Messenger - search.php Multiple Cross-Site Scripting Vulnerabilities

V3 Chat Instant Messenger - search.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to...