Priority LOW 31
A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08312 · Published 2010-01-12 · No fix listed
Priority MEDIUM 40
msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service (application crash) via a modified header in a packet, as possibly…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.17365 · Published 2009-02-19 · No fix listed CWE-20
Priority LOW 38
Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) I…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.143 · Published 2009-01-02 · No fix listed CWE-200
Priority LOW 39
Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service (crash) via a crafted Real-time Transport Co…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.16436 · Published 2008-11-20 · No fix listed
Priority LOW 37
Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service (application crash or system crash) and possibly execute a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.16503 · Published 2007-10-01 · No fix listed CWE-119
Priority HIGH 73
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handlin…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.55451 · Published 2007-08-31 · No fix listed CWE-119
Priority LOW 33
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpr…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.1119 · Published 2006-12-04 · No fix listed
Priority LOW 33
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.06847 · Published 2006-06-27 · No fix listed