CVE-2008-0082
An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 34.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unknown vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 34.35% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- microsoft/windows messenger
- Source
- secure@microsoft.com
References
- http://marc.info/?l=bugtraq&m=121915960406986&w=2
- http://secunia.com/advisories/31446Vendor Advisory
- http://www.securityfocus.com/archive/1/495467/100/0/threaded
- http://www.securityfocus.com/bid/30551
- http://www.securitytracker.com/id?1020681
- http://www.us-cert.gov/cas/techalerts/TA08-225A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2354
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-050
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5995
- http://marc.info/?l=bugtraq&m=121915960406986&w=2
- http://secunia.com/advisories/31446Vendor Advisory
- http://www.securityfocus.com/archive/1/495467/100/0/threaded
- http://www.securityfocus.com/bid/30551
- http://www.securitytracker.com/id?1020681
- http://www.us-cert.gov/cas/techalerts/TA08-225A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2354
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-050
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5995
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.