MSN Messenger Remote Exploit Vulnerability

Windows Security : MSN Messenger Remote Exploit Vulnerability

Posted by Max on 2007/8/29 9:09:55 (2044 reads)

MSN Messenger raised a high risk vulnerability in it’s video chat component, similar to Yahoo’s vulnerability discovered two weeks ago.

This new flaw could allow an attacker to remotely send and execute malicious code on an innocent user’s system. The vulnerability does not affect the latest release of Windows Live Messenger which is 8.1.

An attacker could exploit the flaw by injecting specially-crafted code into a video chat invitation.

On accepting the invitation, the user would experience a buffer overflow, which could in turn cause an application crash and allow the attacker to execute malicious code.

Discovery of the vulnerability is credited to a researcher known as 'Wushi'.

Security firm Secunia rated the vulnerability as 'highly critical', the second highest of its five alert levels.

A Microsoft spokesperson said that the company is investigating the flaw. Microsoft and Secunia recommend that users upgrade to Windows Live Messenger 8.1.

Secunia also recommended that users who have not upgraded should avoid unsolicited video chat invites.

A similar flaw was reported two weeks ago in Yahoo Messenger which could allow an attacker to execute malicious code through a specially crafted chat invite.

Previous article - Next article

Other articles
2009/11/3 14:55:39 - BitDefender Top Ten Malware Threats for October 09
2009/11/3 14:29:38 - Nov. 09 Microsoft Security Intelligence Report
2009/10/7 15:19:17 - StopSign AntiVirus and Anti-Malware is Windows 7 Compatible
2009/10/7 15:11:26 - New Outlook Backup and Migration Software By Disk Doctors
2009/9/30 4:20:57 - Microsoft Security Essentials, FREE Security Tool Just Released
2009/9/28 14:31:52 - New Rogue Antispyware Cloaked To Infects Computers
2009/9/9 4:31:49 - Trend Micro Proves Leadership in URL Filtering and Web Security
2009/9/9 4:16:20 - New Free Tool to Clean Conficker Once and For All
2009/9/1 8:37:11 - Kaspersky Internet Security 2010 and Kaspersky Anti-Virus 2010 Out Now
2009/9/1 7:54:50 - NEW P2P Advertising Network Protects Users Against Lawsuits And Identity Theft

The comments are owned by the poster. We aren't responsible for their content.

Poster	Thread
edward83	Posted: 2009/2/8 15:58 Updated: 2009/2/8 15:58
Just popping in Joined: 2009/2/8 From: Posts: 10	Re: MSN Messenger Remote Exploit Vulnerability Hello. Check our page with top content: Facebook, craigslist portland