Microsoft Windows Messenger vulnerabilities

2 vulnerabilities

Known vulnerabilities in Microsoft Windows Messenger, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2008-0082microsoftwindows_messenger
EPSS score
34.35%
An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unknown vectors.10CVE-2004-0597greg_roelofslibpng+3
EPSS score
81.86%
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.