CVE:CVE-2009-2544
CNNVD:CNNVD-200907-295
Microsoft Windows Live Messenger和Messenger Plus! Live (MPL) 组件Marcelo Costa FileServer存在目录遍历漏洞，远程认证用户可以通过在路径中输入..(dot dot)列出任意目录和浏览任意文件。
solution:Upgrade marcelo_costa fileserver to a higher version than 1.0,and avoid the version 1.0