Microsoft MSN Messenger Image File Transfer Denial of Service Vulnerability

Bugtraq ID:	8221
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 17 2003 12:00AM
Updated:	Jul 17 2003 12:00AM
Credit:	Discovery is credited to Bahaa Naamneh <[email protected]>.
Vulnerable:	Microsoft MSN Messenger Service 6.0
Not Vulnerable:

Microsoft MSN Messenger Image File Transfer Denial of Service Vulnerability

Microsoft MSN Messenger is reportedly prone to a denial of service when certain malformed image files are received through a file transfer. Sending several malformed image files will reportedly cause the messenger to fail.

The exact cause of this vulnerability is not currently known. This record will be updated when further information becomes available.

Microsoft MSN Messenger Image File Transfer Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft MSN Messenger Image File Transfer Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft MSN Messenger Image File Transfer Denial of Service Vulnerability

References:

• MSN Messenger 6 (Microsoft)
  
• Buffer overflow in MSN Messenger 6.0 (Bahaa Naamneh )