PT-2002-1299 · Microsoft · Msn Messenger+1

Published 2002-05-03 · Updated 2008-09-11 · CVE-2002-0228

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft MSN Messenger (affected versions not specified)

Description The issue allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information, such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites or DNS-spoofed sites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0228

Affected Products

Activex

Msn Messenger

References · 4

• http://iss.net/security_center/static/8084.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0228 · Security Note
• http://online.securityfocus.com/archive/1/254021 · Vendor Advisory
• http://securityfocus.com/bid/4028 · Note