Login Request a demo
Unscored severity · published Apr 12, 2005
CVE-2005-0562
GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width
–
CVSS
23.2%
EPSS
No
On KEV
Description
GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.
Exploitation
Is it being used?
Exploit prediction (EPSS)23.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Msn Messenger · Microsoft
6.2 · source: NVD
Affected product
MM
Msn Messenger
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0562
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0562
Patch
http://secunia.com/advisories/14915/
Patch
http://www.kb.cert.org/vuls/id/633446
Patch
http://www.us-cert.gov/cas/techalerts/TA05-102A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/19950
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927
More from Msn Messenger
–
CVE-2007-2931
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified…
–
CVE-2007-3436
Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption) via a flood of SIP INVITE requests to the port specified for…
–
CVE-2006-0363
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds registry key,…
–
CVE-2004-0597
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the…
–
CVE-2004-0122
Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files