CVE-2006-3250

Windows Live Messenger 8.0 is affected by a heap-based buffer overflow in the handling of imported Contact List (.ctt) files. The flaw can allow user-assisted attackers to execute arbitrary code when a crafted .ctt file is imported by the user. The vulnerable component is the messenger client’s i...