Shoutbox

URGENT: Personal MESSAGE OVERFLOW - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Skype & Live Messenger (/forumdisplay.php?fid=10)
+----- Thread: URGENT: Personal MESSAGE OVERFLOW (/showthread.php?tid=69530)

URGENT: Personal MESSAGE OVERFLOW by SoulReaver on 12-15-2006 at 06:02 PM

Dear msn programmers,

i am a MCTS and for years i am in programming industry.

I have found a big error and i could not change it.I want to solve this problem because i think someone can write a virus(i think for live messenger)

The problem is that i have found some codes in contactcoll.cache file in Live Messenger.

                                             

it's encypted but when i paste it codes to my Personal Message.

Live Messenger crashed and right now i can't be able to access.

I want to change my personal message from registry but i don't where is, could you help me with that situation.

I think it's a overflow that's why live messenger has the error thank you...


RE: URGENT: Personal MESSAGE OVERFLOW by CookieRevised on 12-15-2006 at 08:59 PM

quote:
Originally posted by SoulReaver
Live Messenger crashed and right now i can't be able to access.

I want to change my personal message from registry but i don't where is, could you help me with that situation.
the PSM isn't stored in the registry. It is stored in the cache files (and on the server if you have roaming profiles on).

You can try to fix it by removing the directories:
%userprofile%\contacts\XXXXX
%userprofile%\Local Settings\Application Data\Microsoft\Windows Live Contacts\XXXXX

where XXXXX is your MSN User ID. Which can be calculated here


quote:
Originally posted by SoulReaver
I think it's a overflow that's why live messenger has the error thank you...
Not all buffer overflows can be abused though. Nevertheless, many can indeed...
RE: URGENT: Personal MESSAGE OVERFLOW by Menthix on 12-15-2006 at 09:01 PM

quote:
Originally posted by SoulReaver
Dear msn programmers
There are no official MSN/Live Messenger coders here. Contact Microsoft?
RE: URGENT: Personal MESSAGE OVERFLOW by SoulReaver on 12-16-2006 at 08:58 PM

Yes i have found the registy thank you again. When i deleted the registry i can re-open my WLM.

But why this situation have happened when controls.cache file codes be pasted in personal message? Has anyone idea???

I know it has an assembly code.

But with this thing someone can write an assembly code to block WLM also MSN plus...


RE: RE: URGENT: Personal MESSAGE OVERFLOW by CookieRevised on 12-16-2006 at 11:59 PM

quote:
Originally posted by SoulReaver
But why this situation have happened when controls.cache file codes be pasted in personal message? Has anyone idea???
because the text you pasted (it was just text afterall, a bunch of ascii characters, not code!) probably contained invalid characters or was maybe just too big or whatever.

But again, not all crashes indicate a buffer overflow, and not all buffer overflow errors automatically mean they can be abused.

eg: if I write code for a control and I program it so it reserves some memory to hold the text you pasted (to copy it or whatever) and the text is so long that the memory area I reserve exceeds valid memory bounderies, the code might crash on simply the memory reservation only. This means nothing has even be pasted or whatever to be able to abuse something.


Don't worry about it too much, and if you still do, report it to MS instead.