Buffer Overflow in Microsoft Messenger Service Allows Remote Denial of Service

CVE-2002-1698

What is CVE-2002-1698?

A buffer overflow vulnerability exists in Microsoft MSN Messenger Service versions 1.0 to 4.6. This flaw can be exploited by remote attackers who send specially crafted messages containing overly long font arguments in the message header. Such exploitation may lead to service denial as it could cause the affected service to crash unexpectedly. Organizations using these versions of MSN Messenger need to be aware of this security risk and consider mitigating actions.

References