Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.0965
Percentile: 0.92531

CVSS Scoring

Affected Products

• cpe:2.3:a:microsoft:msn_messenger_service:*:*:*:*:*:*:*:*

← Back to Home