CVE-2006-6252

Windows Live Messenger < 8.0 - Denial of Service via Gestual Emoticon Processing

Title source: llm
STIX 2.1

Description

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/452645/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/452620/100/0/threaded

Scores

EPSS 0.1109
EPSS Percentile 95.5%

Details

Status published
Products (1)
microsoft/windows_live_messenger < 8.0
Published Dec 04, 2006
Tracked Since Feb 18, 2026