Vulnerability record · CVE-2005-2225 · published 12 July 2005
CVE-2005-2225: Microsoft msn messenger service vulnerability
Microsoft · Msn Messenger Service
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers.
Description
Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers.
AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://securitytracker.com/id?1014444 | ExploitVendor Advisory |
| http://www.digitalparadox.org/viewadvisories.ah?view=45 | ExploitVendor Advisory |
| http://www.messenger-blog.com/?p=146 | ExploitVendor AdvisoryURL Repurposed |
| http://securitytracker.com/id?1014444 | ExploitVendor Advisory |
| http://www.digitalparadox.org/viewadvisories.ah?view=45 | ExploitVendor Advisory |
| http://www.messenger-blog.com/?p=146 | ExploitVendor AdvisoryURL Repurposed |
Track CVE-2005-2225 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Source: NIST National Vulnerability Database (record CVE-2005-2225), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
