GCVE - cpe:2.3:a:microsoft:windows_live_messenger:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:windows_live_messenger:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Live Messenger (`8f3371a2-3dfc-58e7-bf3b-6c9a41d14e12`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2544`	not_vulnerable	2026-06-08 04:51:29.121396	Details available Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. (dot dot) in a pathname. Published: 2009-07-20T18:00:00.000Z Updated: 2024-08-07T05:52:15.255Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/9093	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5828`	vulnerable	2026-06-08 04:50:53.301704	Details available Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields. Published: 2009-01-02T19:00:00.000Z Updated: 2024-08-07T11:04:44.725Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4862 http://www.securityfocus.com/archive/1/499624/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5179`	vulnerable	2026-06-08 04:50:49.959026	Details available Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service (crash) via a crafted Real-time Transport Control Protocol (RTCP) receiver report packet. Published: 2008-11-20T15:00:00.000Z Updated: 2024-08-07T10:40:17.275Z Open on db.gcve.eu Reference links http://www.voipshield.com/research-details.php?id=132 http://www.securityfocus.com/bid/32341 https://exchange.xforce.ibmcloud.com/vulnerabilities/46670 http://www.securitytracker.com/id?1021294	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6252`	vulnerable	2026-06-08 04:49:22.387473	Details available Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons. Published: 2006-12-04T11:00:00.000Z Updated: 2024-08-07T20:19:35.173Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/452645/100/0/threaded http://www.securityfocus.com/archive/1/452620/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.