CVE-2002-1831

Currently unrated

Key Information:

Vendor
Microsoft
Status
Msn Messenger
Vendor
CVE Published:
31 December 2002

Summary

Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.

References

http://www.iss.net/security_center/static/9161.php
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/4827
vdb-entryx_refsource_BID
http://online.securityfocus.com/archive/1/274086
mailing-listx_refsource_BUGTRAQ

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

Collectors

NVD DatabaseMitre Database
.