yahoo Vulnerability Advisory Catalog

Total 62 security vulnerabilities recorded for yahoo software and firmware.

← Back to All Vendors
CVE-2005-0242 UNKNOWN
Component: messenger

The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a maliciou...

📅 2005-02-18
CVSS 4.6 Dossier →
CVE-2005-0243 UNKNOWN
Component: messenger

Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could...

📅 2005-02-17
CVSS 5.0 Dossier →
CVE-2004-0043 UNKNOWN
Component: messenger

Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute ar...

📅 2004-02-03
CVSS 7.5 Dossier →
CVE-2003-1135 UNKNOWN
Component: messenger

Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send request (sendfile) with a large n...

📅 2003-12-31
CVSS 2.6 Dossier →
CVE-2003-1129 UNKNOWN
Component: audio_conferencing_activex_control

Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service...

📅 2003-12-31
CVSS 2.6 Dossier →
CVE-2002-2361 UNKNOWN
Component: messenger

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs vi...

📅 2002-12-31
CVSS 5.8 Dossier →
CVE-2002-1665 UNKNOWN
Component: messenger

Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c...

📅 2002-12-31
CVSS 7.5 Dossier →
CVE-2002-1664 UNKNOWN
Component: messenger

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive inform...

📅 2002-12-31
CVSS 6.4 Dossier →
CVE-2002-0032 UNKNOWN
Component: messenger

Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI....

📅 2002-07-26
CVSS 7.5 Dossier →
CVE-2002-0031 UNKNOWN
Component: messenger

Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (...

📅 2002-07-26
CVSS 4.6 Dossier →
CVE-2002-0322 UNKNOWN
Component: messenger

Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing....

📅 2002-06-25
CVSS 7.5 Dossier →
CVE-2002-0321 UNKNOWN
Component: messenger

Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or d...

📅 2002-06-25
CVSS 5.0 Dossier →
CVE-2002-0320 UNKNOWN
Component: messenger

Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) messag...

📅 2002-06-25
CVSS 7.5 Dossier →
CVE-2000-0047 UNKNOWN
Component: pager

Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message....

📅 1999-10-01
CVSS 5.0 Dossier →
Page 3 of 3 (62 Total Records)