Security Best Practice: Blocking MSN Messenger

Instant Messaging applications allow communication and collaboration between Internet users using various modes of communication, including instant messages exchange, voice and video, application sharing, white board, file transfer and remote assistance.Windows Live Messenger, formerly and still...

CentOS 3 / 4 : gaim (CESA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...

CVE-2006-3298

CVE-2006-3298 affects Yahoo! Messenger versions 7.5.0.814 and 7.0.438. The vulnerability allows remote attackers to cause a crash in jscript.dll by sending messages containing non-ASCII characters. The NVD entry, with CVSS v2 base score 5.0 (Medium), lists network access, no authentication, and p...

CLexploits.ctt.txt

Windows Live Messenger 8.0 Contact List .ctt Heap Overflow /////////////////////////////////////////////// // by: JAAScois // www.jaascois.com 25/06/2006 // // Exploit at: 0x0076228A = kernel32.FormatMessageW // Example: // download .ctt file :...

CVE-2006-3250

Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List .ctt file, which triggers the overflow when it is imported by the user...

CVE-2006-3250

Windows Live Messenger 8.0 is affected by a heap-based buffer overflow in the handling of imported Contact List (.ctt) files. The flaw can allow user-assisted attackers to execute arbitrary code when a crafted .ctt file is imported by the user. The vulnerable component is the messenger client’s i...

AOL Instant Messenger NSS Library Memory Leak Vulnerability

Description: AOL Instant Messenger AIM is susceptible to affected to DoS-type memory leak vulnerability disclosed in Mozilla Network Security Services library implementation. This library is shipped with the AIM 5.9 utility. Reportedly the Network Security Services NSS library will leak 256 bytes...

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

PT-2006-4144 · Microsoft · Windows Live Messenger

Name of the Vulnerable Software and Affected Versions: Windows Live Messenger version 8.0 Description: A heap-based buffer overflow issue allows user-assisted attackers to execute arbitrary code via a crafted Contact List .ctt file. This overflow is triggered when the crafted file is imported by...

Windows Live Messenger 8.0 Heap Overflow

Windows Live Messenger 8.0 Contact List .ctt Heap Overflow /////////////////////////////////////////////// // by: JAAScois // www.jaascois.com 25/06/2006 // // Exploit at: 0x0076228A = kernel32.FormatMessageW // Example: // download .ctt file :...

Microsoft Windows Live Messenger buffer overflow

Heap overflow on .ctt file import...

Yahoo! Messenger <= 7.5.0.184 Multiple Vulnerabilities

Binary data 3665.prm...

Yahoo! Messenger 7.07.5 - jscript.dll Non-ASCII Character Denial of Service

Yahoo! Messenger 7.07.5 - jscript.dll Non-ASCII Character Denial of Service source: https://www.securityfocus.com/bid/18622/info Yahoo! Messenger is prone to a denial-of-service vulnerability. Successful exploitation will cause the application to crash, effectively denying service. This issue...

Yahoo! Messenger 7.0/7.5 - 'jscript.dll' Non-ASCII Character Denial of Service

source: https://www.securityfocus.com/bid/18622/info Yahoo! Messenger is prone to a denial-of-service vulnerability. Successful exploitation will cause the application to crash, effectively denying service. This issue affects version 7.5.0.814; other versions may also be vulnerable. The following...

Yahoo messenger bug

Hi, I found a vulnerability in yahoo messenger that if you receive a Private message with this string "msg:---------------------------------------------iframe onload=$InlineAction:"without quotesYahoo messenger will Crash with a runtime error. Remote crash proof of concept: 1. Open messenger and...

V3 Chat Instant Messenger - 'profile.php?site_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

V3 Chat Instant Messenger - profile.php?site_id Cross-Site Scripting

V3 Chat Instant Messenger - profile.php?siteid Cross-Site Scripting source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

V3 Chat Instant Messenger - expire.php?cust_name Cross-Site Scripting

V3 Chat Instant Messenger - expire.php?custname Cross-Site Scripting source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitiz...