PT-2006-6881 · Microsoft · Windows Live Messenger

Publicado 2006-12-04 · Atualizado 2018-10-17 · CVE-2006-6252

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Live Messenger versions 8.0 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a long string composed of ":D" sequences. These sequences are interpreted as emoticons when gestual emoticons are enabled.

Recommendations For Microsoft Windows Live Messenger versions 8.0 and earlier, consider disabling gestual emoticons to prevent the denial of service caused by CPU consumption due to the interpretation of long ":D" sequences as emoticons.

Correção

Identificadores relacionados

CVE-2006-6252

Produtos afetados

Windows Live Messenger

Referências · 3

• http://securityfocus.com/archive/1/452620/100/0/threaded · Nota
• http://securityfocus.com/archive/1/452645/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6252 · Nota de Segurança