Secunia Logo  
 Vulnerability InformationVulnerability ScanningCommunityBlog - new entry!Corporate InformationOnline ShopCustomer Login  
 Secunia AdvisoriesSecunia ResearchBinary Analysis  
Home > Vulnerability Information > Secunia Advisories > Microsoft Windows Messenger ActiveX Control Vulnerability
Secunia Advisories
Advisories
Search
Advisories by Product
Advisories by Vendor
Historic Advisories
Mailing Lists
Report Vulnerability
Contact Form
Business Solutions Restricted
Partner Solutions Restricted
About


Secunia PSI WorldMap 		 
Microsoft Windows Messenger ActiveX Control Vulnerability
Secunia Advisory: SA31446
Advisory Toolbox:
Issue ticket
Save in to-do list
Mark as handled
Exploit information
Download as PDF
Review actions
Add comment
Release Date: 2008-08-12
Last Update: 2008-08-14
Popularity: 5,362 views

Critical:
Moderately critical
Impact: Manipulation of data
Exposure of sensitive information
Where: From remote
Solution Status: Vendor Patch

Software:Microsoft Windows Messenger 4.x
Microsoft Windows Messenger 5.x
Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply patches.

-- Windows Messenger 4.7 --

Windows XP SP2/SP3:
http://www.microsoft.com/downloads/de...=8f588f7e-c4ed-42a0-b157-54b1eda60474

Windows XP Professional x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=a5fc5457-832f-4ee8-be60-4cc8518d1c10

Windows Server 2003 SP1/SP2:
http://www.microsoft.com/downloads/de...=302315a8-ccb2-47c2-9104-b8e1d1f49aa0

Windows Server 2003 x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=be94d138-7d7b-489e-baa6-e214950be6b9

Windows Server 2003 with SP1/SP2 for Itanium-based Systems:
http://www.microsoft.com/downloads/de...=e4b72618-536b-4a21-bd91-d91be9ca24e5


-- Windows Messenger 5.1 --

Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=A8D9EB73-5F8C-4B9A-940F-9157A3B3D774

Windows XP SP2/SP3:
http://www.microsoft.com/downloads/de...=A8D9EB73-5F8C-4B9A-940F-9157A3B3D774

Windows XP Professional x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=A8D9EB73-5F8C-4B9A-940F-9157A3B3D774

Windows Server 2003 SP1/SP2:
http://www.microsoft.com/downloads/de...=A8D9EB73-5F8C-4B9A-940F-9157A3B3D774

Windows Server 2003 x64 Edition (optionally with SP2):
http://www.microsoft.com/downloads/de...=A8D9EB73-5F8C-4B9A-940F-9157A3B3D774

Windows Server 2003 with SP1/SP2 for Itanium-based Systems:
http://www.microsoft.com/downloads/de...=A8D9EB73-5F8C-4B9A-940F-9157A3B3D774

Provided and/or discovered by:
The vendor credits Haifei Li, Fortinet.

Changelog:
2008-08-14: Added link in "Original Advisory" section.

Original Advisory:
MS08-050 (KB955702):
http://www.microsoft.com/technet/security/Bulletin/MS08-050.mspx

Fortinet:
http://www.fortiguardcenter.com/advisory/FGA-2008-18.html

Extended Solution:
The "Extended Solution" section is available for Secunia customers only. Request a trial and get access to the Secunia Customer Area and Extended Secunia advisories.

Change Page:
[ 1 ] [ 2 ] [ 3 ]


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 8
New vulnerabilities: 15
Updated advisories: 11

Moderately // 134 views
Robo-FTP Response Processing Buffer Overflow Vulnerability
Less // 95 views
XM Easy Personal FTP Server Denial of Service Vulnerability
Moderately // 133 views
Joomla LyftenBloggie Component "author" SQL Injection Vulnerability
Less // 130 views
DotNetNuke Cross-Site Scripting and Information Disclosure
Moderately // 158 views
Ubuntu update for php5
Moderately // 154 views
Joomla GCalendar Component "gcid" SQL Injection
Moderately // 142 views
RADIO istek scripti Information Disclosure Security Issue
Highly // 158 views
Gentoo update for PEAR-Net_Traceroute

26th Nov, 2009
New advisories: 15
New vulnerabilities: 37
Updated advisories: 48

Moderately // 291 views
Ingate Firewall and SIParator Multiple Vulnerabilities
Moderately // 356 views
SugarCRM Multiple Vulnerabilities

Solutions | More...  

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Joomla LyftenBloggie Component "author" SQL Injection Vulnerability // 47 views
2. XM Easy Personal FTP Server Denial of Service Vulnerability // 42 views
3. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 40 views
4. Robo-FTP Response Processing Buffer Overflow Vulnerability // 37 views
5. RADIO istek scripti Information Disclosure Security Issue // 34 views
6. Joomla GCalendar Component "gcid" SQL Injection // 33 views
7. DotNetNuke Cross-Site Scripting and Information Disclosure // 32 views
8. Adobe Reader/Acrobat Multiple Vulnerabilities // 30 views
9. Adobe Flash Player Multiple Vulnerabilities // 30 views
10. Ubuntu update for php5 // 30 views



Contact | Terms & Conditions and Copyright | Report Vulnerability | Press | Jobs (open positions) | About Secunia
Copyright Secunia 2002-2009