PT-2007-4229 · Microsoft · Msn Messenger+1

Publicado 2007-08-31 · Atualizado 2018-10-12 · CVE-2007-2931

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft MSN Messenger versions 6.2 through 7.5 Microsoft Live Messenger version 8.0

Description The issue is related to a heap-based buffer overflow that can be triggered during video conversation handling in Web Cam and video chat sessions, potentially allowing remote attackers to execute arbitrary code.

Recommendations For Microsoft MSN Messenger versions 6.2 through 7.5, update to a version that is not affected by this issue. For Microsoft Live Messenger version 8.0, update to a version that is not affected by this issue. As a temporary workaround, consider disabling video conversation handling in Web Cam and video chat sessions until a patch is available.

Exploit

Correção

Buffer Overflow

RCE

Enumeração de Fraquezas

CWE-119

CWE-20

Identificadores relacionados

CVE-2007-2931

Produtos afetados

Live Messenger

Msn Messenger

Referências · 14

• 🔥 http://securityfocus.com/bid/25461 · Exploit
• 🔥 https://exploit-db.com/exploits/30537 · Exploit
• 🔥 https://exploit-db.com/exploits/4334 · Exploit
• 🔥 http://team509.com/modules.php?name=News&file=article&sid=50 · Exploit
• http://secunia.com/advisories/26570 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2063 · Nota
• http://kb.cert.org/vuls/id/166521 · Nota
• http://us-cert.gov/cas/techalerts/TA07-254A.html · Nota
• http://vupen.com/english/advisories/2007/2987 · Aviso do Fabricante
• http://osvdb.org/40126 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-054 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36314 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2931 · Nota de Segurança
• http://securitytracker.com/id?1018622 · Nota