Heap-based Buffer Overflow in Windows Live Messenger 8.0

CVE-2006-3250

Summary

A heap-based buffer overflow vulnerability exists in Windows Live Messenger 8.0, which could allow attackers to execute arbitrary code upon the importing of a specially crafted Contact List (.ctt) file. When the malicious file is processed, it triggers a buffer overflow, potentially compromising the user's system. This vulnerability highlights the need for caution when handling contact list files from untrusted sources.

References