CVE-2006-6252
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows...
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.
- Record
CVE-2006-6252- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.
- Record
CVE-2006-6252- Updated
- 2026-11-02
EUVDEUVD-2006-6235 No score
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.
- Record
EUVD-2006-6235- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rwg8-hqq6-g2cq No score
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows...
Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (CPU consumption) via a long string composed of ":D" sequences, which are interpreted as emoticons.
- Record
GHSA-rwg8-hqq6-g2cq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6252 is a medium vulnerability (CVSS 4.3) in Microsoft Windows Live Messenger, published December 4, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.2%, the 95th percentile. No source names a fixed version.