03.09.2004 - MS04-010: Vulnerability in MSN Messenger Could Allow Information Disclosure (838512)

A security vulnerability exists in Microsoft MSN Messenger. The vulnerability exists because of the method used by MSN Messenger to handle a file request. An attacker could exploit this vulnerability by sending a specially crafted request to a user running MSN Messenger. If exploited successfully, the attacker could view the contents of a file on the hard drive without the user's knowledge as long as the attacker knew the location of the file and the user had read access to the file. - Download Microsoft MSN Messenger 6.0/6.1 - View Microsoft Security Bulletin MS04-010 - View Microsoft Knowledge Base Article - 838512 - Visit Microsoft Corporation