CVE-2009-0647

CVE-2009-0647 affects Microsoft Windows Live Messenger 2009 (build 14.0.8064.206 and related 14.0.8064.x). The vulnerability arises when a remote attacker sends a message where the Content-Type header’s charset field contains a modified or UTF-8.0 value, which can cause the target’s msnmsgr.exe t...

CVE-2010-0278

The CVE-2010-0278 entry covers a vulnerability in an ActiveX control (msgsc.14.0.8089.726.dll) used by Microsoft Windows Live Messenger 2009 (build 14.0.8089.726) on Windows Vista/7. The flaw is triggered by calling the ViewProfile method with a crafted argument during an MSN Messenger session, c...