CVE-2002-0472
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging...
CVE-2002-0472 is a medium vulnerability (CVSS 5.0) in Microsoft Msn Messenger, published June 11, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.9%, the 96th percentile. No source names a fixed version.
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
Exploit likelihood
What each source reports
NVD Score used
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
- Record
CVE-2002-0472- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
- Record
CVE-2002-0472- Updated
- 2026-11-02
EUVDEUVD-2002-0469 No score
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
- Record
EUVD-2002-0469- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5fj2-ghpc-2v79 No score
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging...
MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
- Record
GHSA-5fj2-ghpc-2v79- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |