1. Home
  2. CVE Database
  3. CVE-2010-0278
MEDIUM · 4.3

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (m...

Vulnerability Description

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
MicrosoftWindows Live Messenger2009
MicrosoftWindows 7All versions
MicrosoftWindows VistaAll versions

References

FAQ

What is CVE-2010-0278?

CVE-2010-0278 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (m...

How severe is CVE-2010-0278?

CVE-2010-0278 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-0278?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows Live Messenger, Microsoft Windows 7, Microsoft Windows Vista.