← Vulnerability feed

Vulnerability record · CVE-2005-0562 · published 12 April 2005

CVE-2005-0562: Microsoft msn messenger vulnerability

Microsoft · Msn Messenger

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.

7.5 CVSS 2.0 High EPSS 23% · top 2.3%
7.5CVSS 2.0 base score
23%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/14915/ PatchVendor Advisory
http://www.kb.cert.org/vuls/id/633446 PatchThird Party AdvisoryUS Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-102A.html PatchThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022
https://exchange.xforce.ibmcloud.com/vulnerabilities/19950
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927
http://secunia.com/advisories/14915/ PatchVendor Advisory
http://www.kb.cert.org/vuls/id/633446 PatchThird Party AdvisoryUS Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-102A.html PatchThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-022
https://exchange.xforce.ibmcloud.com/vulnerabilities/19950
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4927

Track CVE-2005-0562 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0597libpng PNG chunk buffer overflows allow remote code executionlibpng 1.2.5 and earlier contain multiple buffer overflows in the png_handle_tRNS, png_handle_sBIT and png_handle_hIST functions, which fail to valid…EPSS 83%analysed9.3CVE-2007-2931Microsoft MSN/Live Messenger heap buffer overflow in video chatA heap-based buffer overflow exists in Microsoft MSN Messenger 6.2, 7.0, 7.5 and Windows Live Messenger 8.0, triggered through unspecified vectors in…EPSS 55%analysed7.5CVE-2002-0155Microsoft msn chat control vulnerabilityBuffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remot…EPSS 24%5.0CVE-2007-3436Microsoft msn messenger vulnerabilityMicrosoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption) via a flood of SIP INVITE reque…EPSS 13%5.0CVE-2004-0122Microsoft msn messenger vulnerabilityMicrosoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.EPSS 22%5.0CVE-2002-1698Microsoft msn messenger vulnerabilityBuffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long FN (font) …EPSS 16%5.0CVE-2002-1831Microsoft msn messenger vulnerabilityMicrosoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-…EPSS 22%5.0CVE-2002-0472Microsoft msn messenger vulnerabilityMSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attack…EPSS 12%

Source: NIST National Vulnerability Database (record CVE-2005-0562), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.