CVE-2009-0647

medium Microsoft
CVSS v3 Base Score
5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS Score
18.6%
Exploitation probability in 30 days
Top 5% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
P
Published: February 19, 2009 (6293 days ago)
Last Modified: April 23, 2026
Vendor: Microsoft
Source: NVD

Description

msnmsgr.exe in Windows Live Messenger (WLM) 2009 build 14.0.8064.206, and other 14.0.8064.x builds, allows remote attackers to cause a denial of service (application crash) via a modified header in a packet, as possibly demonstrated by a UTF-8.0 value of the charset field in the Content-Type header line. NOTE: this has been reported as a format string vulnerability by some sources, but the provenance of that information is unknown.

CWE

CWE-20

Affected Products

microsoft windows live messenger

References

🔗 secunia.com 🔗 www.securityfocus.com 🔗 www.securityfocus.com 🔗 www.vupen.com 🔗 exchange.xforce.ibmcloud.com