CVE-2002-1831 Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field...
MediumCVSS 5.0
EPSS 22.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft msn messenger | = 1.0 | No fix listed |
| Microsoft msn messenger | = 2.0 | No fix listed |
| Microsoft msn messenger | = 2.2 | No fix listed |
| Microsoft msn messenger | = 3.0 | No fix listed |
| Microsoft msn messenger | = 3.6 | No fix listed |
| Microsoft msn messenger | = 4.0 | No fix listed |
| Microsoft msn messenger | = 4.5 | No fix listed |
| Microsoft msn messenger | = 4.6 | No fix listed |
References
- 20020523 Re: Misformated message header causes msn messenger to crash mailing-list
- msn-invite-dos(9161) vdb-entry
- 4827 exploit vdb-entry