PT-2006-6881 · Microsoft · Windows Live Messenger

Published 2006-12-04 · Updated 2018-10-17 · CVE-2006-6252

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Live Messenger versions 8.0 and earlier

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a long string composed of ":D" sequences. These sequences are interpreted as emoticons when gestual emoticons are enabled.

Recommendations For Microsoft Windows Live Messenger versions 8.0 and earlier, consider disabling gestual emoticons to prevent the denial of service caused by CPU consumption due to the interpretation of long ":D" sequences as emoticons.

Fix

Related Identifiers

CVE-2006-6252

Affected Products

Windows Live Messenger

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-6252 · Security Note
• http://securityfocus.com/archive/1/452620/100/0/threaded · Note
• http://securityfocus.com/archive/1/452645/100/0/threaded · Note