Vulnerability in Microsoft Msn_chat_control
CVE-2002-0155
Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.
EPSS: 0.241 (97.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Msn_chat_control
- Microsoft Msn_messenger — versions 4.5, 4.6
- Microsoft Msn_messenger_service_for_exchange — versions 4.5, 4.6
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)