CVE-2002-0472: Medium severity Microsoft MSN Messenger vulnerability
Published Jun 11, 2002
·Updated
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
Affected Software
1 affected component
Microsoft MSN Messenger=3.6
Event History
Jun 11, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0472?
CVE-2002-0472 is considered a medium severity vulnerability due to its potential for message spoofing.
2
How do I fix CVE-2002-0472?
To fix CVE-2002-0472, users should upgrade to a more recent and secure version of MSN Messenger.
3
What types of attacks can CVE-2002-0472 facilitate?
CVE-2002-0472 can facilitate spoofing attacks where attackers can impersonate other users in message exchanges.
4
Which versions of MSN Messenger are affected by CVE-2002-0472?
CVE-2002-0472 specifically affects MSN Messenger 3.6 and possibly other earlier versions.
5
Is there a workaround for CVE-2002-0472 if I can't upgrade MSN Messenger?
There are no known effective workarounds for CVE-2002-0472 other than upgrading to a secure version.