CVE-2005-2225

Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers.

• http://securitytracker.com/id?1014444Exploit, Vendor Advisory
• http://www.digitalparadox.org/viewadvisories.ah?view=45Exploit, Vendor Advisory
• http://www.messenger-blog.com/?p=146Exploit, Vendor Advisory, URL Repurposed
• http://securitytracker.com/id?1014444Exploit, Vendor Advisory
• http://www.digitalparadox.org/viewadvisories.ah?view=45Exploit, Vendor Advisory
• http://www.messenger-blog.com/?p=146Exploit, Vendor Advisory, URL Repurposed

Published

Jul 12, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2219Hosting Controller 6.1 Hotfix 2.1 allows remote authenticate…
• CVE-2005-2220Dragonfly Commerce allows remote attackers to change a produ…
• CVE-2005-2221Multiple SQL injection vulnerabilities in Dragonfly Commerce…
• CVE-2005-2222Unknown vulnerability in the HTTPMail service in MailEnable …
• CVE-2005-2223Unknown vulnerability in the SMTP service in MailEnable Stan…
• CVE-2005-2224aspnet_wp.exe in Microsoft ASP.NET web services allows remot…
• CVE-2005-2226Microsoft Outlook Express 6.0 leaks the default news server …
• CVE-2005-2227Softiacom wMailserver 1.0 stores passwords in plaintext in t…
• CVE-2005-2228Web Wiz Forums 7.9 and 8.0 allows remote attackers to view m…
• CVE-2005-2229Blog Torrent 0.92 and earlier stores sensitive files under t…
• CVE-2005-2230Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates…
• CVE-2005-2231High Availability Linux Project Heartbeat 1.2.3 allows local…