Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-0278 — Microsoft Windows Live Messenger vulnerability

4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
29.0%
top 3.42%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Windows Live Messenger
Timeline
PublishedJan 12
Latest updateMay 2

Description

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-phfg-g4q8-45r5: A certain ActiveX control in msgsc↗2022-05-02
▶
CVEList
CVE-2010-0278: A certain ActiveX control in msgsc↗2010-01-12
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows Live Messenger 2009 - ActiveX Denial of Service↗2010-01-08
▶
CVE-2010-0278 — Microsoft vulnerability | cvebase