CVE-2006-3250
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to...
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.
- Record
CVE-2006-3250- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.
- Record
CVE-2006-3250- Updated
- 2026-11-02
EUVDEUVD-2006-3247 No score
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.
- Record
EUVD-2006-3247- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qmqj-g5h9-gf39 No score
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to...
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.
- Record
GHSA-qmqj-g5h9-gf39- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3250 is a medium vulnerability (CVSS 5.1) in Microsoft Windows Live Messenger, published June 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.85%, the 94th percentile. No source names a fixed version.
References
jaascois.com/exploits/18602016
securityfocus.com/archive/1/438442/100/0/threaded
securitydot.net/xpl/exploits/vulnerabilities/articles/1108/exploit.html
securitytracker.com/id?1016373
exchange.xforce.ibmcloud.com/vulnerabilities/27417
nvd.nist.gov/vuln/detail/CVE-2006-3250
github.com/advisories/GHSA-qmqj-g5h9-gf39