User Control Panel
Advertisements

HELP US, HELP YOU!

New MSN Vulns

 
Post new topic   Reply to topic    Bot Depot Forum Index -> MSN Protocol
View unanswered posts
Author Message
alienz
Almost An Agent
Almost An Agent


Joined: 22 Mar 2004
Posts: 1436
Location: Mars
Reputation: 55.7

PostPosted: Wed Feb 09, 2005 9:42 pm    Post subject: Reply with quote

Exploit Targets MSN Messenger
_________________
Check out Botworld! A dev resource for things bot.
Downloads, articles, news, fourm and more.
http://botworld.marzopolis.com
Back to top
darkmonkey
The Merovingian
The Merovingian


Joined: 18 Apr 2004
Posts: 2557
Location: London, England
Reputation: 39.3Reputation: 39.3Reputation: 39.3Reputation: 39.3
votes: 7

PostPosted: Wed Feb 09, 2005 10:00 pm    Post subject: Reply with quote

It's a good job Trillian can't handle CE's then! LRazz
_________________
~ Josh
[ Need bot hosting on a dedicated server? PM me. ]
Back to top
alienz
Almost An Agent
Almost An Agent


Joined: 22 Mar 2004
Posts: 1436
Location: Mars
Reputation: 55.7

PostPosted: Thu Feb 10, 2005 3:27 am    Post subject: Reply with quote

QUOTE(darkmonkey @ Feb 9 2005, 05:00 PM)
It's a good job Trillian can't handle CE's then! LRazz

True, but does your bot use Trillian? And I dont know what CE is, but the article makes no mention of one.

_________________
Check out Botworld! A dev resource for things bot.
Downloads, articles, news, fourm and more.
http://botworld.marzopolis.com
Back to top
darkmonkey
The Merovingian
The Merovingian


Joined: 18 Apr 2004
Posts: 2557
Location: London, England
Reputation: 39.3Reputation: 39.3Reputation: 39.3Reputation: 39.3
votes: 7

PostPosted: Thu Feb 10, 2005 8:58 am    Post subject: Reply with quote

CEs are Custom Emoticons, which are what use the .png's, to exploit it. I'll consider removing them from my bot, too.
_________________
~ Josh
[ Need bot hosting on a dedicated server? PM me. ]
Back to top
Siebe
God Like
God Like


Joined: 06 Jan 2004
Posts: 562
Location: Netherlands
Reputation: 39.8Reputation: 39.8Reputation: 39.8Reputation: 39.8

PostPosted: Sat Feb 12, 2005 3:04 am    Post subject: Reply with quote

What for? You can test if CE's are corrupted, besides, they have already enforced the new build, so no one is at risk anymore.
Back to top
Cer
Upgraded Agent
Upgraded Agent


Joined: 03 Feb 2004
Posts: 3776
Location: Michigan
Reputation: 146.9
votes: 4

PostPosted: Sat Feb 12, 2005 9:34 pm    Post subject: Reply with quote

QUOTE(Siebe @ Feb 11 2005, 10:04 PM)
What for? You can test if CE's are corrupted, besides, they have already enforced the new build, so no one is at risk anymore.

You mean they forced an upgrade for MSN? I got a message saying I "had to" upgrade, I clicked no, and then clicked to sign in again...

Isn't the most recent version of MSN past 7.0? I don't want to upgrade because I'll have my stupid n00bie contacts testing winks and nudges on me.... and messengers could really go without annoying features like that (which is partly why I don't like Yahoo Messenger).

_________________
Current Site (2008) http://www.cuvou.com/
Back to top
Siebe
God Like
God Like


Joined: 06 Jan 2004
Posts: 562
Location: Netherlands
Reputation: 39.8Reputation: 39.8Reputation: 39.8Reputation: 39.8

PostPosted: Sat Feb 12, 2005 9:42 pm    Post subject: Reply with quote

If you are using MSN6.1 or 6.2 you are forced to upgrade to the latest 6.2 build (which is not vulnerable). MSN7 is not affected, and no one forces you to upgrade to that.

Besides, if you dont want "noobs testing out winks and nudges" then disable nudges and winks in the options or remove all noobs from your contactlist. Simple as that.
Back to top
draget
Not Yet a God
Not Yet a God


Joined: 29 Dec 2004
Posts: 367
Location: Australia
Reputation: 32.2Reputation: 32.2Reputation: 32.2

PostPosted: Sun Feb 13, 2005 1:38 pm    Post subject: Reply with quote

is the new msn 7.0.064 affected?
Back to top
..::BIGmouth( )::..
God Like
God Like


Joined: 05 Feb 2004
Posts: 801

Reputation: 44.1Reputation: 44.1Reputation: 44.1Reputation: 44.1

PostPosted: Sun Feb 13, 2005 2:37 pm    Post subject: Reply with quote

-_- what do you think? if it says only msn 6.2 is affected take a guess..
Back to top
Display posts from previous:   
Post new topic   Reply to topic    Bot Depot Forum Index -> MSN Protocol All times are GMT
Page 1 of 1

 



Protected by phpBB Security phpBB-TweakS
phpBB Security Has Blocked 9 Exploit Attempts.
Antispam Captcha Mod by phpbb-security.com
Powered by phpBB © 2001, 2005 phpBB Group