CVE-2002-0472: Microsoft Msn Messenger

Medium severity, CVSS 5.0. EPSS: 11.9% chance of exploitation in the next 30 days.

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.

Affected products

• Microsoft Msn Messenger: version 3.6 only

Published 2002-08-12. Last modified 2026-06-16.