VULNERABILITY INTELLIGENCE

CVE-2006-6252

CVSS score4.3 MEDIUM
EPSS probability11.19%
CISA KEVNot currently listed
Published2006-12-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.

Primary references