| Package | Affected versions | Patched versions |
|---|---|---|
| windows messenger | = 4.7= 5.1 |
An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unknown vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free