CVE-2008-7255

CVE-2008-7255 concerns aMSN (Alvaro’s Messenger) where login_screen.tcl can save a password after logout, enabling session hijacking on unattended workstations. The vulnerability is described with a CVSS v2 base score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P) and is classified as a local issue with no ...

CVE-2010-0744

The CVE-2010-0744 issue affects amsn (aka Alvaro's Messenger) 0.98.3 and earlier, where SSL hostname verification is absent, allowing MITM impersonation of an MSN server with an arbitrary certificate. OpenVAS and Fedora NASL entries corroborate that updates were released (e.g., amsn-0.98.3-2.fc11...

Yahoo! Messenger Webcam ActiveX Control Stack Buffer Overflow (CVE-2007-3147; CVE-2007-3148)

Yahoo! Messenger is an instant messaging communicating application developed by Yahoo! Inc. One of the features that Yahoo! Messenger provides is the ability to send and receive video content. The Yahoo! Webcam ActiveX controls shipped with Yahoo! Messenger is used to handle the video data in a...

Novell GroupWise Messenger HTTP POST Request Invalid Memory Access (CVE-2006-4511)

Novell GroupWise Messenger is a corporate instant messaging solution targeted towards medium to large enterprise organizations. It facilitates secure communications and policy-based management through Novell's eDirectory product suite. The product is based on a client-server model where messaging...

AOL Instant Messenger Away Message Buffer Overflow (CVE-2004-0636)

AOL Instant Messenger AIM is an instant messaging and presence computer program which allows registered users to communicate in real time. AOL Instant Messenger AIM registers itself as the handler of URL scheme aim. There exists a vulnerability in the way AOL Instant Messenger AIM parses an away...

Yahoo Messenger YMailAttach ActiveX Control Buffer Overflow (CVE-2006-6603)

Yahoo! Messenger is a instant messaging communicating application developed by Yahoo! Inc. When a user registers a Yahoo! user account, it is bundled with the Yahoo! Mail service, which is a web-based email service. Users can use a web browser to read, send and maintain their email messages. The...

Pidgin / Adium messenger multiple security vulnerabilities

Memory corruption on SLP MSN messages parsing. Multiple DoS conditions...

BigAnt Messenger Server USV Command Buffer Overflow

Added: 02/09/2010 BID: 37520 OSVDB: 61386 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt server version 2.52 and earlier are vulnerable to a remote, unauthenticated buffer overflow attack. The...

BigAnt Messenger Server USV Command Buffer Overflow

Added: 02/09/2010 BID: 37520 OSVDB: 61386 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt server version 2.52 and earlier are vulnerable to a remote, unauthenticated buffer overflow attack. The...

BigAnt Messenger Server USV Command Buffer Overflow

Added: 02/09/2010 BID: 37520 OSVDB: 61386 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt server version 2.52 and earlier are vulnerable to a remote, unauthenticated buffer overflow attack. The...

DJ Legend Heap Overflow Proof Of Concept

!/usr/bin/perl DJ Legend .m3u / .pls File Local Heap Overflow Poc www.djlegend.net/ Found By : SkuLL-HacKeR Msn : [email protected] EAX 45454545 ESP 0012EF6C EBP 00DA50F8 ASCII "C:\Program Files\DJ Legend Trial\SkuLL-HacKeR.m3u" ESI 0012EFD8 EDI 014143F8 EBP 00000000 ESI 02CD7102 EIP 7C90EAF...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

No description provided by source. Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 html object classid='clsid:C2828995-4A83-4100-A212-3024BA117356' id='target'...

Windows Live Messenger 2009 Active-X Heap Overflow

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC downloads :http://download.live.com/ Date : 2010/01/21 tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== Windows Live Messenger 2009 ActiveX Heap Overflow PoC ===================================================== Aouther : SarBoT511 Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflo...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live SkyDrive\Microsoft.Live.Folders.RichUpload.3.dll" prototype = "Property...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow PoC Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Session fixation

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

CVE-2010-0278

The CVE-2010-0278 entry covers a vulnerability in an ActiveX control (msgsc.14.0.8089.726.dll) used by Microsoft Windows Live Messenger 2009 (build 14.0.8089.726) on Windows Vista/7. The flaw is triggered by calling the ViewProfile method with a crafted argument during an MSN Messenger session, c...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...