CVE-2011-1243: Microsoft Windows XP

High severity, CVSS 9.3. EPSS: 29.3% chance of exploitation in the next 30 days.

The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that "corrupt the system state," aka "Microsoft Windows Messenger ActiveX Control Vulnerability."

Affected products

• Microsoft Windows XP: any version; affected versions not specified

Published 2011-04-13. Last modified 2026-06-16.