CVE-2002-0155
Microsoft MSN Chat Control - Buffer Overflow via ResDLL Parameter
Title source: llmDescription
Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4707
US Government Resource third-party-advisory
x_refsource_cert
http://www.cert.org/advisories/CA-2002-13.html
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/9041.php
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=102089960531919&w=2
Scores
EPSS
0.2410
EPSS Percentile
97.6%
Details
Status
published
Products (5)
microsoft/msn_chat_control
microsoft/msn_messenger
4.5
microsoft/msn_messenger
4.6
microsoft/msn_messenger_service_for_exchange
4.5
microsoft/msn_messenger_service_for_exchange
4.6
Published
May 29, 2002
Tracked Since
Feb 18, 2026