CVEvulnerability
CVE-2002-0155
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-05-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.
Affected configurations
• microsoft msn chat control
• microsoft msn messenger 4.5
• microsoft msn messenger 4.6
• microsoft msn messenger service for exchange 4.5
• microsoft msn messenger service for exchange 4.6
References
- http://marc.info/?l=bugtraq&m=102089960531919&w=2 marc.info
- http://www.cert.org/advisories/CA-2002-13.html US Government Resource
- http://www.iss.net/security_center/static/9041.php www.iss.net
- http://www.securityfocus.com/bid/4707 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022 docs.microsoft.com
- http://marc.info/?l=bugtraq&m=102089960531919&w=2 marc.info
- http://www.cert.org/advisories/CA-2002-13.html US Government Resource
- http://www.iss.net/security_center/static/9041.php www.iss.net
- http://www.securityfocus.com/bid/4707 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022 docs.microsoft.com