{"id":"CVE-2002-0155","url":"https://www.cyber-defence.io/tools/cve/CVE-2002-0155","generatedAt":"2026-10-27T18:32:10.378Z","title":"Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.","description":"Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.","published":"2002-05-29T04:00:00.000Z","lastModified":"2026-06-16T21:56:54.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":7.5,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"cwe":[],"affected":["microsoft/msn chat control","microsoft/msn messenger","microsoft/msn messenger service for exchange"],"epss":{"score":0.24104,"percentile":0.97834,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 24.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-13.html","tags":["US Government Resource"],"source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9041.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4707","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-13.html","tags":["US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9041.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-0155","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}