CVE-2005-2225

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1014444Exploit, Vendor Advisory
http://www.digitalparadox.org/viewadvisories.ah?view=45Exploit, Vendor Advisory
http://www.messenger-blog.com/?p=146Exploit, Vendor Advisory, URL Repurposed
http://securitytracker.com/id?1014444Exploit, Vendor Advisory
http://www.digitalparadox.org/viewadvisories.ah?view=45Exploit, Vendor Advisory
http://www.messenger-blog.com/?p=146Exploit, Vendor Advisory, URL Repurposed

Timeline

Published: Jul 12, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-22265.0Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could all CVE-2005-22277.2Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator pri CVE-2005-22285.0Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.CVE-2005-22297.5Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficie CVE-2005-22302.1Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite CVE-2005-22312.1High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2005-22324.6Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argumen CVE-2005-22337.2Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line CVE-2005-22347.2Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command lin CVE-2005-22357.2Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long comman CVE-2005-22367.2Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary CVE-2005-22377.2Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary