How severe is CVE-2002-0472?

CVE-2002-0472 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2002-0472 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-0472?

CVE-2002-0472 affects Microsoft Msn Messenger. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2002-0472?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2002-0472 published?

CVE-2002-0472 was published on 2002-08-12 and last updated on 2026-06-16.

CVE-2002-0472

CVE-2002-0472 is a medium-severity vulnerability in Microsoft Msn Messenger with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 12% (96th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microsoft Msn Messenger
Published: 2002-08-12
Last modified: 2026-06-16

Description

MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.

Frequently asked questions

What is CVE-2002-0472?: MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
How severe is CVE-2002-0472?: CVE-2002-0472 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2002-0472 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-0472?: CVE-2002-0472 affects Microsoft Msn Messenger. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2002-0472?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2002-0472 published?: CVE-2002-0472 was published on 2002-08-12 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:microsoft:msn_messenger:3.6:*:*:*:*:*:*:*

More vulnerabilities in Microsoft Msn Messenger

CVE-2004-0597 — Critical (CVSS 10.0): Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute…
CVE-2007-2931 — Critical (CVSS 9.3): Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted…
CVE-2005-0562 — High (CVSS 7.5): GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary…
CVE-2002-0155 — High (CVSS 7.5): Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant…
CVE-2007-3436 — Medium (CVSS 5.0): Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption)…
CVE-2004-0122 — Medium (CVSS 5.0): Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read…

All CVEs affecting Microsoft Msn Messenger →