MSN messenger improper file transfer ip-address field parsing

MSN Messenger bug Release Date: 20/11/03 Discovery date: Sometime around 2001 or 2000 Versions Affected: ------------------ Msn messenger 1.0 - msn messenger 6.0.0602 Windows messenger all versions Not Affected: ------------ Msn Messenger 6.1, trillian, gaim Description: ----------- A bug exists ...

IP address leak in MSN messanger

With filte transfer requests it's possible to determine user IP...

MSN Messenger DoS

DoS on downloading incomplete image...

Buffer overflow in MSN Messenger 6.0

Application: MSN Messenger 6.0 http://www.msnmessenger-download.com/Preview/ Affected Versions: MSN Messenger 6.0 biuld 6.0.0501 and prior Bug: Buffer overflow in msnmsgr.exe In the small viewer box that show the sending file before accepting it. Author: Bahaa Naamneh e-mail: [email protected]...

CVE-2002-0155

CVE-2002-0155 describes a buffer overflow in the Microsoft MSN Chat ActiveX control (MSNChat OCX) used by MSN Messenger 4.5/4.6 and Exchange Instant Messenger 4.5/4.6. The vulnerability occurs in the ResDLL parameter handling, allowing a remote attacker to execute arbitrary code with the user’s p...

CVE-2002-0377

CVE-2002-0377 affects Gaim 0.57, where sensitive data is written to world-readable and group-writable files in /tmp, enabling local users to read authentication information and access MSN web email accounts of other users. The underlying issue is insecure file permissions leading to information d...

CVE-2002-0155

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX...

CVE-2002-1831

Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service crash via an invite request that contains hex-encoded spaces %20 in the Invitation-Cookie field...

CVE-2002-0472

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users...

CVE-2002-0472

CVE-2002-0472 affects MSN Messenger Service 3.6 and possibly other versions, where weak authentication during client message exchange enables remote spoofing of messages from other users. The OpenVAS entry for Windows Messenger (MSN/Windows Messenger family) classifies this as multiple vulnerabil...

CVE-2002-0472

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users...

CVE-2002-0155

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX...

Microsoft MSN Messenger 1 4 - Malformed Invite Request Denial of Service

Microsoft MSN Messenger 1 4 - Malformed Invite Request Denial of Service source: https://www.securityfocus.com/bid/4827/info Microsoft's MSN Messenger is an instant messenging client for Windows based machines, based on the Passport system. A vulnerability has been reported in some versions of MS...

Microsoft MSN Messenger 1 < 4 - Malformed Invite Request Denial of Service

source: https://www.securityfocus.com/bid/4827/info Microsoft's MSN Messenger is an instant messenging client for Windows based machines, based on the Passport system. A vulnerability has been reported in some versions of MSN Messenger. Under some circumstances, it may be possible to crash the...

CVE-2002-0228

Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites or DNS-spoofed sites...

Security Bulletin MS02-022: Unchecked Buffer in MSN Chat Control Can Lead to Code Execution &#40;Q321661&#41;

---------------------------------------------------------------------- Title: Unchecked Buffer in MSN Chat Control Can Lead to Code Execution Q321661 Date: 08 May 2002 Software: MSN Chat, MSN Messenger, Exchange Instant Messenger Impact: Run Code of Attacker's Choice Max Risk: Critical Bulletin:...

Buffer overflow in MSN Messanger

Buffer overflow on long font name in header and in OCX MSN Chat Control...

ADVISORY: MSN Messenger OCX Buffer Overflow

MSN Messenger OCX Buffer Overflow Release Date: 5/8/2002 Severity: High Remote code execution Systems Affected: Microsoft MSN Chat Control Microsoft MSN Messenger 4.5 and 4.6, which includes the MSN Chat control Microsoft Exchange Instant Messenger 4.5 and 4.6, which includes the MSN Chat control...

Misformated message header causes msn messenger to crash

Introduction to the flaw. Msn Messenger is a popular Instant-Messaging client from Microsoft. After the previous flaws regarding the privacy of users another flaw is discovered. This flaw makes the msn messenger client crash after receiving a misformated font variable in the message header with...

CVE-2002-0228

CVE-2002-0228 affects Microsoft MSN Messenger. The vulnerability allows remote attackers to use Javascript referencing an ActiveX object to obtain sensitive information (e.g., display names, web site navigation) when the user is connected to certain Microsoft sites or DNS-spoofed sites. OpenVAS/O...