Show filters
67 Total Results
Displaying 61-67 of 67
Sort by:
Attacker Value
Unknown
CVE-2002-2361
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.
0
Attacker Value
Unknown
CVE-2002-0032
Disclosure Date: July 26, 2002 (last updated February 22, 2025)
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
0
Attacker Value
Unknown
CVE-2002-0031
Disclosure Date: July 26, 2002 (last updated February 22, 2025)
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.
0
Attacker Value
Unknown
CVE-2002-0320
Disclosure Date: June 25, 2002 (last updated February 22, 2025)
Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.
0
Attacker Value
Unknown
CVE-2002-0321
Disclosure Date: June 25, 2002 (last updated February 22, 2025)
Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.
0
Attacker Value
Unknown
CVE-2002-0322
Disclosure Date: June 25, 2002 (last updated February 22, 2025)
Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.
0
Attacker Value
Unknown
CVE-2000-0047
Disclosure Date: October 01, 1999 (last updated February 22, 2025)
Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
0
