ME
Product
Messenger
33
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Messenger to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7216 | – | Sep 11 | Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… Affected: through 11.5.0.228 |
| CVE-2012-0268 | – | Jan 19 | Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute… Affected: through 11.5.0.152; 0.99.17-1; 1.0; 1.0.4; 1.0.6; 2.0.1.4; +34 more |
| CVE-2009-4171 | – | Dec 2 | An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer… Affected: 9.0.0.2162 |
| CVE-2007-5017 | – | Sep 20 | Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and… Affected: 8.1.0.421 |
| CVE-2007-4635 | – | Aug 31 | Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer… Affected: 8.1.0.209; 8.1.0.402 |
| CVE-2007-4515 | – | Aug 31 | Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to… Affected: through 8.1.0.413 |
| CVE-2007-4391 | – | Aug 17 | Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field… Affected: 8.1.0.413 |
| CVE-2007-3928 | – | Jul 21 | Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry Affected: 8.1 |
| CVE-2007-3638 | – | Jul 10 | Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka… Affected: 8.1 |
| CVE-2007-3147 | – | Jun 11 | Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long… Affected: 2.0.1.4; 8.0; 8.0.0.863; 8.0.1; 8.0_2005.1.1.4; 8.1.0.249 |
| CVE-2007-3148 | – | Jun 11 | Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long… Affected: 2.0.1.4; 8.0; 8.0.0.863; 8.0.1; 8.0_2005.1.1.4; 8.1.0.249 |
| CVE-2007-1680 | – | Apr 6 | Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to… Affected: 8.0; 8.0.0.863; 8.0_2005.1.1.4; 8.1.0.209; 8.1.0.239 |
| CVE-2007-0868 | – | Feb 9 | Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors Affected: 4.0; 5.0; 5.0.1046; 5.0.1065; 5.0.1232; 5.5; +18 more |
| CVE-2007-0768 | – | Feb 6 | Multiple cross-site scripting (XSS) vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject… Affected: through 8.1.0.209 |
| CVE-2006-6603 | – | Dec 15 | Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML… Affected: through 8.0; 5.0; 5.5; 5.6; 6.0; 7.0; +1 more |
| CVE-2006-5563 | – | Oct 27 | Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a… Affected: 8.0 |
| CVE-2006-4975 | – | Sep 25 | Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the… Affected: All versions, or not specified |
| CVE-2006-3298 | – | Jun 29 | Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, which triggers the crash in… Affected: 7.0.438; 7.5.0.814 |
| CVE-2005-1671 | – | May 19 | The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and… Affected: 5.5; 5.6; 5.6.0.1351; 6.0 |
| CVE-2005-1618 | – | May 16 | The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a… Affected: 5.5; 5.6; 6.0 |
| CVE-2005-0737 | – | May 2 | Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode Affected: 4.0; 5.0; 5.0.1046; 5.0.1065; 5.0.1232; 5.5; +11 more |
| CVE-2005-0242 | – | Feb 18 | The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the… Affected: 5.5; 5.6; 5.6.0.1351; 6.0; 6.0.0.1750 |
| CVE-2005-0243 | – | Feb 17 | Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to… Affected: 5.5; 5.6; 5.6.0.1351; 6.0; 6.0.0.1750 |
| CVE-2004-0043 | – | Feb 3 | Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long… Affected: through 5.6.0.1351 |
| CVE-2003-1135 | – | Dec 31 | Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send request (sendfile) with a large number of "%" (percent)… Affected: 5.6 |
| CVE-2002-1665 | – | Dec 31 | Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp… Affected: 5.0 |
| CVE-2002-2361 | – | Dec 31 | The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing Affected: 4.0; 5.0; 5.5 |
| CVE-2002-1664 | – | Dec 31 | Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information Affected: 5.0 |
| CVE-2002-0032 | – | Jul 26 | Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI Affected: 5.0 |
| CVE-2002-0031 | – | Jul 26 | Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3)… Affected: 5.0 |
| CVE-2002-0321 | – | Jun 25 | Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding)… Affected: 5.0 |
| CVE-2002-0322 | – | Jun 25 | Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing Affected: 4.0 |
| CVE-2002-0320 | – | Jun 25 | Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field Affected: 5.0 |
Showing 33