Join LiveSide!
Sign In using: Name/Password OpenID
or Live ID: Sign In Live ID
0 out of 8,047 members
are online, & 34 guest(s).

Recent Comments

–Godders UK
re: Windows Live / MSN Messenger to force security upgrade

–the andyman
re: Windows Live / MSN Messenger to force security upgrade

–Godders UK
re: Windows Live / MSN Messenger to force security upgrade

–pikablu0530
re: Windows Live / MSN Messenger to force security upgrade

Log in or Join to leave a comment!

LiveSide on Mobile

Our latest posts and our favorite links,
all on your phone or mobile device
Visit m.LiveSide.net
Or go to www.LiveSide.net
on your mobile device and we'll redirect you!

Tweets We Like

Loading...

LiveSide Time

Redmond

Dallas (server)

London

Shanghai

Windows Live Calendar

PDC LA Nov 17-19

   www.microsoftpdc.com

Follow us on Facebook

    LiveSide.net
   
    Promote Your Page Too

  • LiveSide on the Windows Live Network
  • LiveSide on Facebook
  • LiveSide on Twitter
  • LiveSide RSS  
  • Windows Live Alerts
  •  
  • feedburner
  •  
LiveSide - News blog

Windows Live / MSN Messenger to force security upgrade

Anand, a Security PM for Windows Live Messenger, posted tonight on the Inside Windows Live Messenger blog that rolling out in the next few weeks, if you haven't already upgraded your Messenger to at least 8.1 (the current version released version), you will soon be forced to do so.

forcedmsgr 

According to Anand:

We will soon configure the service such that any user on Windows XP or later system has to use Windows Live Messenger 8.1. When a user using an older version of Messenger tries to login, the client will help the user with a mandatory upgrade to Messenger 8.1.

Some of you might feel this inconvenient, but in order to protect you and protect the health of the network we have chosen to take this step

And like it or not, the "health of the network" is a pretty valid reason for taking this extra step.  It all boils down to Security Bulletin MS07-054, "Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)".  This vulnerability, which has been fixed in 8.1 and the beta version 8.5 "could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system."

Whatever users out there who are still using Windows 98 or 2000 are vulnerable as well, and for those systems a newer version of MSN Messenger 7 was released today. Available now, the MSN Messenger 7 upgrade will be forced as well, once the Windows Live Messenger upgrades have completed

Comments

Windows Live / MSN Messenger ???????????????????????? - LiveSino - LiveSide ????????? wrote Windows Live / MSN Messenger ???????????????????????? - LiveSino - LiveSide ?????????
on Thu, Sep 13 2007 7:12 AM

Pingback from  Windows Live / MSN Messenger ????????????????????????  -  LiveSino - LiveSide ?????????

pikablu0530 wrote re: Windows Live / MSN Messenger to force security upgrade
on Thu, Sep 13 2007 11:52 AM

They didn't seem to release a new version of MSN Messenger 7.5 which addresses this vulnerability as well.

I understand why 7.0 is updated to cater for Windows 98 and 2000 users (because v7.5 is Windows XP or above only), but they shouldn't assume that everyone on Windows XP has upgraded to Windows Live Messenger 8 already.

Godders UK wrote re: Windows Live / MSN Messenger to force security upgrade
on Thu, Sep 13 2007 5:05 PM

Glad to see they're retaining 98/2k support - I have to use msn on than sometime.

On another note - why not 8.5? As far as I can tell it's out of beta (at least the version I'm using does not say beta anywhere - not even in help > about). (Build no. 8.5.1288.816)

» Microsoft to force Messenger users to upgrade | All about Microsoft | ZDNet.com wrote » Microsoft to force Messenger users to upgrade | All about Microsoft | ZDNet.com
on Thu, Sep 13 2007 5:36 PM

Pingback from  » Microsoft to force Messenger users to upgrade | All about Microsoft | ZDNet.com

the andyman wrote re: Windows Live / MSN Messenger to force security upgrade
on Thu, Sep 13 2007 5:50 PM

@Godders, techically 8.5 is still a beta, but even if it wasn't it can currently only (officially) be installed through the Windows Live suite installer which is a beta.

Techy News Blog » Microsoft to force Messenger users to upgrade wrote Techy News Blog » Microsoft to force Messenger users to upgrade
on Thu, Sep 13 2007 11:07 PM

Pingback from  Techy News Blog » Microsoft to force Messenger users to upgrade

Godders UK wrote re: Windows Live / MSN Messenger to force security upgrade
on Fri, Sep 14 2007 4:13 PM

Thanks andyman.

Windows Live Messenger Users Forced to Upgrade - CyberNet News wrote Windows Live Messenger Users Forced to Upgrade - CyberNet News
on Fri, Sep 14 2007 9:11 PM

Pingback from  Windows Live Messenger Users Forced to Upgrade - CyberNet News

Sign In Live ID using Live ID, Name/Password, or OpenID
or Join LiveSide to leave a comment!