CVE-2008-7255: Amsn

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.

Affected products

• Amsn Amsn: up to and including 0.97; version 0.83 only; version 0.90 only; version 0.91 only; version 0.92 only; version 0.93 only; …

Published 2010-04-20. Last modified 2026-06-16.