VULNERABILITY INTELLIGENCE
CVE-2010-0278
CVSS score4.3 MEDIUM
EPSS probability8.31%
CISA KEVNot currently listed
Published2010-01-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P
Description
A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session.