Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:windows_live_messenger:8.1:*:*:*:*:*:*:*

part: a version: 8.1 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Live Messenger (8f3371a2-3dfc-58e7-bf3b-6c9a41d14e12)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5828 vulnerable 2026-06-08 04:50:53.303854 Details available
Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.
Published: 2009-01-02T19:00:00.000Z
Updated: 2024-08-07T11:04:44.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5144 vulnerable 2026-06-08 04:49:58.006070 Details available
Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to cause a denial of service (application crash or system crash) and possibly execute arbitrary code by placing a malformed file in a new folder under the Sharing Folders path, and triggering a synchronize operation through the Windows MSN Live online service, possibly related to extended file attributes and possibly related to an incomplete fix for MS07-046, as demonstrated by a (1) .jpg, (2) .gif, (3) .wmf, (4) .doc, or (5) .ico file.
Published: 2007-10-01T00:00:00.000Z
Updated: 2024-08-07T15:24:40.948Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.