exploits , vulnerabilities , articles , Microsoft MSN Messenger/Windows Messenger PNG Buffer Overflow Vulnerability

Title	Microsoft MSN Messenger/Windows Messenger PNG Buffer Overflow Vulnerability
Published	2005-02-08-12:00AM
Updated	2005-06-01-03:47PM
Class	Boundary Condition Error
CVE	CAN-2004-0597
Remote	Yes
Local	No
Credit	Juliano Rizzo of Core Security Technologies identified these issues in MSN and Windows Messenger.
Vulnerable	Nortel Networks Symposium Call Center Server (SCCS) Nortel Networks Optivity Telephony Manager (OTM) Nortel Networks Mobile Voice Client 2050 Nortel Networks IP softphone 2050 Microsoft Windows Messenger 5.0 Microsoft Windows Messenger 4.7 .0.3000 Microsoft Windows XP Home SP2 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Professional SP2 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows Messenger 4.7 .0.2009 Microsoft Windows XP Home SP1 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Professional SP1 Microsoft Windows XP Tablet PC Edition SP1 Microsoft MSN Messenger Service 6.2 Microsoft MSN Messenger Service 6.1
Not Vulnerable
Code	An exploit designed to leverage this issue against Microsoft MSN Messenger (msnMessengerPNGexploit.c) has been made available: /data/vulnerabilities/exploits/msnMessengerPNGexploit.c
TXT