Under certain conditions, users of MSN Messenger versions 4.5 and 4.6 with chat control may be vulnerable to damaging rogue code sent by malicious users. In response, Microsoft has issued security alert MS02-022 and encourages affected users to upgrade to the latest version of MSN Messenger.
How it works
MSN chat control is an ActiveX component that allows you to chat with groups of people using MSN Messenger. The upgrade is not necessary for the basic instant-messaging functionality, and MSN Messenger users running Windows XP are not vulnerable unless they have added the chat control to MSN Messenger themselves.
Prevention
A patch is available from Microsoft.
