CVE-2005-0562

MSN Messenger 6.2 - Remote Code Execution via Malformed GIF Image

Title source: llm

Description

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/19950

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/633446

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/14915/

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA05-102A.html

Scores

EPSS 0.2317

EPSS Percentile 97.5%

Details

Status published

Products (1)

microsoft/msn_messenger 6.2

Published Apr 12, 2005

Tracked Since Feb 18, 2026