MS02-022 Unchecked Buffer in MSN Chat Control

http://www.microsoft.com/technet/tre...n/MS02-022.asp

Microsoft Security Bulletin MS02-022 *


Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661)
Originally posted: May 8, 2002

Summary
Who should read this bulletin: All customers using the Microsoft® MSN Chat control, which is available for direct download and ships with MSN Messenger and Exchange Instant Messenger.

Impact of vulnerability: Run Code of Attacker's Choice

Maximum Severity Rating: Critical


Affected Software:

Microsoft MSN Chat Control
Microsoft MSN Messenger 4.5 and 4.6, which includes the MSN Chat control
Microsoft Exchange Instant Messenger 4.5 and 4.6, which includes the MSN Chat control

Acknowledgments
Microsoft thanks *eEye Digital Security (http://www.eeye.com) for reporting this issue to us and working with us to protect customers.