Alvaro

alvaro

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Alvaros Messenger

alvaros_messenger

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-0744 1Alvaro 1Alvaros Messenger Apr 29, 2026 Apr 20, 2010 N/A· v4 N/A· v3 5.8 MEDIUM· v2 aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509...Show more aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.Show less
CVE-2007-2195 1Alvaro 1Alvaros Messenger Apr 23, 2026 Apr 24, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 aMSN (aka Alvaro's Messenger) 0.96 and earlier allows remote attackers to cause a denial of service (application crash) by sending invalid data to TCP port 31337.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2010-0744

1Alvaro

1Alvaros Messenger

Apr 29, 2026

Apr 20, 2010

N/A· v4

N/A· v3

5.8 MEDIUM· v2

aMSN (aka Alvaro's Messenger) 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate.Show less

CVE-2007-2195

1Alvaro

1Alvaros Messenger

Apr 23, 2026

Apr 24, 2007

N/A· v4

N/A· v3

5.0 MEDIUM· v2

aMSN (aka Alvaro's Messenger) 0.96 and earlier allows remote attackers to cause a denial of service (application crash) by sending invalid data to TCP port 31337.