exploits , vulnerabilities , articles , Microsoft MSN Messenger/Windows Messenger PNG Buffer Overflow Vulnerability

Title	Microsoft MSN Messenger/Windows Messenger PNG Buffer Overflow Vulnerability
Published	2005-02-08-12:00AM
Updated	2005-06-01-03:47PM
Class	Boundary Condition Error
CVE	CAN-2004-0597
Remote	Yes
Local	No
Credit	Juliano Rizzo of Core Security Technologies identified these issues in MSN and Windows Messenger.
Vulnerable	Nortel Networks Symposium Call Center Server (SCCS) Nortel Networks Optivity Telephony Manager (OTM) Nortel Networks Mobile Voice Client 2050 Nortel Networks IP softphone 2050 Microsoft Windows Messenger 5.0 Microsoft Windows Messenger 4.7 .0.3000 Microsoft Windows XP Home SP2 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Professional SP2 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows Messenger 4.7 .0.2009 Microsoft Windows XP Home SP1 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Professional SP1 Microsoft Windows XP Tablet PC Edition SP1 Microsoft MSN Messenger Service 6.2 Microsoft MSN Messenger Service 6.1
Not Vulnerable
Code	An exploit designed to leverage this issue against Microsoft MSN Messenger (msnMessengerPNGexploit.c) has been made available: /data/vulnerabilities/exploits/msnMessengerPNGexploit.c
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
• 2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
• 2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
• 2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
• 2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
• 2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
• 2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
• 2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
• 2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
• 2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Wed, 16 Dec 2009 22:46:34 +0000