PT-2002-1299 · Microsoft · Msn Messenger+1

Publicado 2002-05-03 · Atualizado 2008-09-11 · CVE-2002-0228

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft MSN Messenger (affected versions not specified)

Description The issue allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information, such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites or DNS-spoofed sites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0228

Produtos afetados

Activex

Msn Messenger

Referências · 4

• http://iss.net/security_center/static/8084.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0228 · Nota de Segurança
• http://securityfocus.com/bid/4028 · Nota
• http://online.securityfocus.com/archive/1/254021 · Aviso do Fabricante