The vulnerability in MSN Messenger versions 6.0 and 6.1 could let an attacker view the contents of a victim's hard drive during a chat session with the victim.
Attackers "could view files through MSN Messenger on their computer," Toulouse said. "They can do it, and you are not necessarily aware of what they are doing."
Users who do not block anonymous callers are most vulnerable to the exploit. If anonymous callers are blocked, the attacker has to be identified on the victim's address list. To obtain particular information, such as credit card numbers, attackers have to troll the hard drive, said Toulouse.
http://asia.cnet.com/newstech/security/0,39001150,39171414,00.htm
More info at http://reviews.cnet.com/5208-6132-0.html?forumID=32&threadID=14966&start=0

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic