CVE-2010-0278: Medium severity microsoft msn messenger vulnerability
A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0278?
CVE-2010-0278 has a severity level that allows remote attackers to crash the msnmsgr.exe process.
How do I fix CVE-2010-0278?
To fix CVE-2010-0278, you should update Microsoft Windows Live Messenger to the latest version available.
What software is affected by CVE-2010-0278?
CVE-2010-0278 affects Microsoft Windows Live Messenger 2009 running on Windows Vista and Windows 7.
Can CVE-2010-0278 be exploited remotely?
Yes, CVE-2010-0278 can be exploited remotely by invoking the ViewProfile method with crafted arguments.
Is there a workaround for CVE-2010-0278?
A possible workaround for CVE-2010-0278 is to restrict access to the affected version of Microsoft Windows Live Messenger until updates are applied.