|
|
|
| MS08-050 Bulletin Details |
 Microsoft Security Bulletins |
| Bulletin ID: | MS08-050 |
| Title | Vulnerability in Windows Messenger Could Allow Information Disclosure (955702) |
| Summary: | This security update resolves a publicly reported vulnerability in supported versions of Windows Messenger. As a result of this vulnerability, scripting of an ActiveX control could allow information disclosure in the context of the logged-on user. An attacker could change state, get contact information, and initiate audio and video chat sessions without the knowledge of the logged-on user. An attacker could also capture the userÂs logon ID and remotely log on to the userÂs Messenger client impersonating that user.
This security update is rated Important for all supported editions of Microsoft Windows 2000 and Windows XP, and Moderate for all supported versions of Windows Server 2003. For more information, see the subsection, Affected and Non-Affected Software, in this section.
The security update addresses the vulnerability by locking the ActiveX control so that only authorized applications have access to the control. For more information about the vulnerability, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information |
| Knowledgebase: |
955702 |
List of Patches
|
| |
|
|
|
| |
|
|
| Patch Mgmt Features |
 |
|
|
| Desktop Mgmt Features |
|
|
|
| Forums |
|
|
|
| |
|
