CVE-2010-0278
Published Jan 12, 2010A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a…
Vendor/product archive
microsoft / windows_live_messenger CVEs
Beta · best-effort9 CVEs tagged to microsoft / windows_live_messenger — 1 Critical, 0 High, 8 Medium, 0 Low, 0 Unrated.
CVE-2009-2544
Published Jul 20, 2009Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated use…
CVE-2009-0647
Published Feb 19, 2009msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service (application crash) via a…
CVE-2008-5828
Published Jan 2, 2009Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addres…
CVE-2008-5179
Published Nov 20, 2008Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service (cr…
CVE-2007-5144
Published Oct 1, 2007Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service (application cras…
CVE-2007-2931
Published Aug 31, 2007Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vec…
CVE-2006-6252
Published Dec 4, 2006Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string comp…
CVE-2006-3250
Published Jun 27, 2006Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overfl…
Showing 1-9 of 9 CVEsPage 1 of 1