Buffer overflow in Microsoft Windows_live_messenger

CVE-2007-5144

Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service (application crash or system crash) and possibly execute arbitrary code by pl…

Vulnerability class: Buffer Overflow

EPSS: 0.165 (96.6th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_live_messenger — versions 8.1
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)