| Vulnerability Name: | CVE-2006-3250 (CCN-27417) | ||||||||
| Assigned: | 2006-06-26 | ||||||||
| Published: | 2006-06-26 | ||||||||
| Updated: | 2018-10-18 | ||||||||
| Summary: | Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user. | ||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 5.1 Medium (CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List, Sun Jun 25 2006 - 06:41:35 CDT Re: Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow Source: MITRE Type: CNA CVE-2006-3250 Source: CCN Type: Windows Live Messenger Web site Windows Live Messenger Source: MISC Type: UNKNOWN http://securitydot.net/xpl/exploits/vulnerabilities/articles/1108/exploit.html Source: CCN Type: SECTRACK ID: 1016373 Windows Live Messenger Contact List Heap Overflow Source: SECTRACK Type: Exploit 1016373 Source: MISC Type: Exploit http://www.jaascois.com/exploits/18602016/ Source: CCN Type: OSVDB ID: 28208 Microsoft Windows Live Messenger Contact List .ctt File Heap Overflow Source: BUGTRAQ Type: UNKNOWN 20060625 Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow Source: BID Type: Exploit 18639 Source: CCN Type: BID-18639 Microsoft Windows Live Messenger Contact List Processing Remote Denial of Service Vulnerability Source: XF Type: UNKNOWN live-messenger-contact-list-dos(27417) Source: XF Type: UNKNOWN live-messenger-contact-list-dos(27417) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||