{"api_version":"1","generated_at":"2026-07-23T05:16:18+00:00","cve":"CVE-2002-0155","urls":{"html":"https://cve.report/CVE-2002-0155","api":"https://cve.report/api/cve/CVE-2002-0155.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-0155","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-0155"},"summary":{"title":"CVE-2002-0155","description":"Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.","state":"PUBLISHED","assigner":"mitre","published_at":"2002-05-29 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022","name":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Security Bulletin MS02-022 - Critical | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2","name":"http://marc.info/?l=bugtraq&m=102089960531919&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'ADVISORY: MSN Messenger OCX Buffer Overflow' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.iss.net/security_center/static/9041.php","name":"http://www.iss.net/security_center/static/9041.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ISS X-Force Database: msn-chatcontrol-resdll-bo (9041): MSN Chat Control ResDLL buffer overflow","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.cert.org/advisories/CA-2002-13.html","name":"http://www.cert.org/advisories/CA-2002-13.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"CERT Advisory CA-2002-13 Buffer Overflow in Microsoft's MSN Chat ActiveX Control","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/4707","name":"http://www.securityfocus.com/bid/4707","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft MSN Chat Control Remote Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-0155","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0155","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"msn_chat_control","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"msn_messenger","cpe6":"4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"msn_messenger","cpe6":"4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"msn_messenger_service_for_exchange","cpe6":"4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"155","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"msn_messenger_service_for_exchange","cpe6":"4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T02:42:27.554Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"4707","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/4707"},{"name":"CA-2002-13","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.cert.org/advisories/CA-2002-13.html"},{"name":"MS02-022","tags":["vendor-advisory","x_refsource_MS","x_transferred"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022"},{"name":"msn-chatcontrol-resdll-bo(9041)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/9041.php"},{"name":"20020508 ADVISORY: MSN Messenger OCX Buffer Overflow","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-05-08T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2003-03-20T00:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"4707","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/4707"},{"name":"CA-2002-13","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.cert.org/advisories/CA-2002-13.html"},{"name":"MS02-022","tags":["vendor-advisory","x_refsource_MS"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022"},{"name":"msn-chatcontrol-resdll-bo(9041)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/9041.php"},{"name":"20020508 ADVISORY: MSN Messenger OCX Buffer Overflow","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-0155","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"4707","refsource":"BID","url":"http://www.securityfocus.com/bid/4707"},{"name":"CA-2002-13","refsource":"CERT","url":"http://www.cert.org/advisories/CA-2002-13.html"},{"name":"MS02-022","refsource":"MS","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022"},{"name":"msn-chatcontrol-resdll-bo(9041)","refsource":"XF","url":"http://www.iss.net/security_center/static/9041.php"},{"name":"20020508 ADVISORY: MSN Messenger OCX Buffer Overflow","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-0155","datePublished":"2003-04-02T05:00:00.000Z","dateReserved":"2002-03-19T00:00:00.000Z","dateUpdated":"2024-08-08T02:42:27.554Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-05-29 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_chat_control:*:*:*:*:*:*:*:*","matchCriteriaId":"733AB93D-8480-4577-AB65-3E0342B67F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"DFEE276F-4ACC-440B-9F36-FAA7DAD4BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"083C6323-8712-4A42-893D-6A6BE5997689"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger_service_for_exchange:4.5:*:*:*:*:*:*:*","matchCriteriaId":"B2A6D4B7-53E1-423D-A419-330E0B3C661B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger_service_for_exchange:4.6:*:*:*:*:*:*:*","matchCriteriaId":"5040E94F-9F17-4B21-9F99-3378B11D02CE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"155","Ordinal":"1","Title":"CVE-2002-0155","CVE":"CVE-2002-0155","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"155","Ordinal":"1","NoteData":"Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.","Type":"Description","Title":"CVE-2002-0155"},{"CveYear":"2002","CveId":"155","Ordinal":"2","NoteData":"2003-04-02","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"155","Ordinal":"3","NoteData":"2003-03-19","Type":"Other","Title":"Modified"}]}}}