CVE-2007-2931: Microsoft Msn Messenger

High severity, CVSS 9.3. EPSS: 55.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.

Affected products

• Microsoft Msn Messenger: version 6.2 only; version 7.0 only; version 7.5 only
• Microsoft Windows Live Messenger: version 8.0 only

Published 2007-08-31. Last modified 2026-06-16.