Unscored CVE-2002-0155 EUVD-2002-0155GHSA-jjhg-8w5v-3hcv

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, al…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.

References

4707 vdb-entry
CA-2002-13 third-party-advisory
MS02-022 vendor-advisory
msn-chatcontrol-resdll-bo(9041) vdb-entry
20020508 ADVISORY: MSN Messenger OCX Buffer Overflow mailing-list