CVE-2004-0122

Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files...

GLSA-200408-27 : Gaim: New vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-27 Gaim: New vulnerabilities Gaim fails to do proper bounds checking when: Handling MSN messages partially fixed with GLSA 200408-12. Handling rich text format messages. Resolving local hostname. Receiving long URLs. Handli...

GLSA-200408-12 : Gaim: MSN protocol parsing function buffer overflow

The remote host is affected by the vulnerability described in GLSA-200408-12 Gaim: MSN protocol parsing function buffer overflow Sebastian Krahmer of the SuSE Security Team has discovered a remotely exploitable buffer overflow vulnerability in the code handling MSN protocol parsing. Impact : By...

Gaim < 0.82 MSN Protocol Buffer Overflow

Binary data 2160.prm...

MSN Messenger Detection

Binary data 1269.prm...

MSN Messenger Malformed Font Field Remote DoS

Binary data 1268.prm...

MSN Messenger Malformed Invite Request Remote DoS

Binary data 1267.prm...

Gaim: MSN protocol parsing function buffer overflow

Background Gaim is a multi-protocol instant messaging client for Linux which supports many instant messaging protocols. Description Sebastian Krahmer of the SuSE Security Team has discovered a remotely exploitable buffer overflow vulnerability in the code handling MSN protocol parsing. Impact By...

FreeBSD : gaim remotely exploitable vulnerabilities in MSN component (53)

The following package needs to be updated: gaim %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg5b8f9a02ec9311d8b913000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

Multiple GAIM bugs

Buffer overflows on parsing MSN protocol...

gaim remotely exploitable vulnerabilities in MSN component

Sebastian Krahmer discovered several remotely exploitable buffer overflow vulnerabilities in the MSN component of gaim. In two places in the MSN protocol plugins object.c and slp.c, strncpy was used incorrectly; the size of the array was not checked before copying to it. Both bugs affect MSN's...

CVE-2004-0122

Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files...

Microsoft Security Bulletin MS04-010

Microsoft Security Bulletin MS04-010 Vulnerability in MSN Messenger Could Allow Information Disclosure 838512 Issued: March 9, 2004 Version: 1.0 Summary Who should read this document: Customers who are using Microsoft® MSN Messenger Impact of vulnerability: Information Disclosure Maximum Severity...

MSN Messenger unauthorized access

Any file from client computer can be retrieved...

Microsoft MSN Messenger fails to properly validate file requests

Overview Microsoft MSN Messenger fails to properly validate file requests which could allow an attacker to view the contents of files on the victim's system. Description Microsoft MSN Messenger is an instant messaging application that allows users to collaborate with friends using text messages,...

Microsoft MSN Messenger Information Disclosure Vulnerability

Description Microsoft MSN Messenger is prone to an information disclosure vulnerability. When a malformed file transfer request is initiated by a remote user, they may be able to view the contents of files on the remote system. Technologies Affected Microsoft MSN Messenger Service 6.0 Microsoft M...

Microsoft Internet Explorer 5 - Shell: IFrame Cross-Zone Scripting (1)

Microsoft Internet Explorer 5 - Shell: IFrame Cross-Zone Scripting 1 source: https://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Compute...

Microsoft Internet Explorer 5 - Shell: IFrame Cross-Zone Scripting (2)

source: https://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Computer Zone. This issue is related to how shell: URIs are handled by the...

CVE-2004-0007

CVE-2004-0007 affects instant messaging clients Gaim (GAIM) up to version 0.74 and Ultramagnetic before 0.81. The vulnerability is a buffer overflow in the Extract Info Field Function used by MSN and YMSG protocol handlers, allowing remote attackers to cause a denial of service and potentially ex...

msnbug.txt

MSN Messenger bug Release Date: 20/11/03 Discovery date: Sometime around 2001 or 2000 Versions Affected: ------------------ Msn messenger 1.0 - msn messenger 6.0.0602 Windows messenger all versions Not Affected: ------------ Msn Messenger 6.1, trillian, gaim Description: ----------- A bug exists ...