medium5.0Public exploit code
CVE-2002-1831
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded sp…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft MSN Messenger 1 < 4 - Malformed Invite Request Denial of Service2002-05-24 · dos · windows · Verified
Impact
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Msn Messenger | Versions 1.0, 2.0, 2.2, 3.0, 3.6, 4.0 |