CVE-2008-0082: Microsoft Windows Messenger

High severity, CVSS 10.0. EPSS: 34.4% chance of exploitation in the next 30 days.

An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unknown vectors.

Affected products

• Microsoft Windows Messenger: version 4.7 only; version 5.1 only

Published 2008-08-13. Last modified 2026-06-16.