NetSight
high7.5

CVE-2002-0155

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attacker…

Impact

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.

Affected products

VendorProductAffected versions
MicrosoftMsn Chat Control
All versions
MicrosoftMsn Messenger
Versions 4.5, 4.6
MicrosoftMsn Messenger Service For Exchange
Versions 4.5, 4.6

References