A vulnerability has been identified in Windows Live Messenger, which could be exploited by attackers to cause a denial of service. This issue is caused by an error when processing certain messages with a manipulated "Charset", which could be exploited to cause a vulnerable application to crash by sending a specially crafted message to an affected system.

Affected Products

Windows Live Messenger versions 14.x

Solution

VUPEN Security is not aware of any vendor-supplied patch.

References

http://www.vupen.com/english/advisories/2009/0466

Credits

Vulnerability reported by rasod korad.

Changelog

2009-02-19 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.