CVE-2010-0278

2010-01-1217:30:01

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.079

Percentile

94.4%

JSON

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.

Affected configurations

Nvd

Node

microsoftwindows_live_messengerMatch2009

AND

microsoftwindows_7

microsoftwindows_vista

VendorProductVersionCPE
microsoftwindows_live_messenger2009cpe:2.3:a:microsoft:windows_live_messenger:2009:*:*:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
microsoftwindows_vista*cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_live_messenger	2009	cpe:2.3:a:microsoft:windows_live_messenger:2009:::::::*
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7::::::::
microsoft	windows_vista	*	cpe:2.3:o:microsoft:windows_vista::::::::