PT-2007-4229 · Microsoft · Msn Messenger+1

Published 2007-08-31 · Updated 2018-10-12 · CVE-2007-2931

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft MSN Messenger versions 6.2 through 7.5 Microsoft Live Messenger version 8.0

Description The issue is related to a heap-based buffer overflow that can be triggered during video conversation handling in Web Cam and video chat sessions, potentially allowing remote attackers to execute arbitrary code.

Recommendations For Microsoft MSN Messenger versions 6.2 through 7.5, update to a version that is not affected by this issue. For Microsoft Live Messenger version 8.0, update to a version that is not affected by this issue. As a temporary workaround, consider disabling video conversation handling in Web Cam and video chat sessions until a patch is available.

Exploit

Fix

Buffer Overflow

RCE

Weakness Enumeration

CWE-119

CWE-20

Related Identifiers

CVE-2007-2931

Affected Products

Live Messenger

Msn Messenger

References · 14

• 🔥 http://securityfocus.com/bid/25461 · Exploit
• 🔥 https://exploit-db.com/exploits/30537 · Exploit
• 🔥 https://exploit-db.com/exploits/4334 · Exploit
• 🔥 http://team509.com/modules.php?name=News&file=article&sid=50 · Exploit
• http://secunia.com/advisories/26570 · Vendor Advisory
• http://vupen.com/english/advisories/2007/2987 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-054 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2931 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2063 · Note
• http://kb.cert.org/vuls/id/166521 · Note
• http://us-cert.gov/cas/techalerts/TA07-254A.html · Note
• http://osvdb.org/40126 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36314 · Note
• http://securitytracker.com/id?1018622 · Note