CVE-2007-5144
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service (application crash or system crash) and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing Folders path, and triggering a synchronize operation through the Windows MSN Live online service, possibly related to extended file attributes and possibly related to an incomplete fix for MS07-046, as demonstrated by a (1) .jpg, (2) .gif, (3) .wmf, (4) .doc, or (5) .ico file.
Desbordamiento de búfer en el motor GDI de Windows Live Messenger, tal y como se utiliza en MSN Live 8.1, permite a atacantes remotos con la complicidad del usuario provocar una denegación de servicio (caída de aplicación o caída del sistema) y posiblemente ejecutar código de su elección al situar un fichero malformado en una carpeta nueva bajo la ruta Carpetas Compartidas, y disparando una operación de sincronización a través del servicio en línea Windows MSN Live, posiblemente relativo a atributos de fichero extendidos y posiblemente relativo a un parche incompleto para MS07-046, como se demuestra con un fichero (1) .jpg, (2) .gif, (3) .wmf, (4) .doc, ó (5) .ico.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-09-30 CVE Reserved
- 2007-10-01 CVE Published
- 2024-08-07 CVE Updated
- 2024-10-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://lostmon.blogspot.com/2007/09/windows-live-messenger-jpg-overflow.html | X_refsource_misc | |
http://osvdb.org/45523 | Vdb Entry | |
http://www.securityfocus.com/bid/25795 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Microsoft Search vendor "Microsoft" | Windows Live Messenger Search vendor "Microsoft" for product "Windows Live Messenger" | 8.1 Search vendor "Microsoft" for product "Windows Live Messenger" and version "8.1" | - |
Affected
|