CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:windows_live_messenger:2009:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:11

Type Values Removed Values Added
References () http://www.securityfocus.com/archive/1/508811/100/0/threaded - () http://www.securityfocus.com/archive/1/508811/100/0/threaded -
References () http://www.securityfocus.com/bid/37680 - Exploit () http://www.securityfocus.com/bid/37680 - Exploit

Information

Published : 2010-01-12 17:30

Updated : 2024-11-21 01:11


NVD link : CVE-2010-0278

Mitre link : CVE-2010-0278

CVE.ORG link : CVE-2010-0278


JSON object : View

Products Affected

microsoft

  • windows_vista
  • windows_7
  • windows_live_messenger