wushi has reported a vulnerability in MSN Messenger, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the handling of video conversations and can be exploited to cause a heap-based buffer overflow via specially crafted data sent to a user.

Successful exploitation allows execution of arbitrary code, but requires that the victim accepts the incoming Web Cam invitation.

Solution
Update to fixed versions.
Further details available in Customer Area

Provided and/or discovered by
wushi

Changelog
Further details available in Customer Area

Original Advisory
MS07-054 (KB942099):
http://www.microsoft.com/technet/security/Bulletin/MS07-054.mspx

Team 509:
http://www.team509.com/modules.php?name=News&file=article&sid=50

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area