What is the scope of the vulnerability?
This is an Information Disclosure vulnerability.An attacker who exploited this vulnerability could view the contents of a file on the hard drive without the user’s knowledge if the attacker knew the exact location of the file. What causes the vulnerability? A vulnerability results because of the method used by MSN Messenger to handle a file request between two MSN Messenger accounts. The method used to handle the request does not validate certain contents of the request when creating the session. What is MSN Messenger? MSN Messenger is an instant messaging program that allows users to send instant messages to each other, or create other peer to peer sessions such as sharing voice, video, or sending files. More information about MSN Messenger can be found at the following Web site. What is Windows Messenger? Windows Messenger is also an instant messaging program that allows similar functionality to MSN Messenger. Windows XP comes with Windows Messenger, which remains available even afte
