CVSS: 9.8EPSS: 43%CPEs: 6EXPL: 5CVE-2007-3148 – Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-3148
11 Jun 2007 — Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method. El desbordamiento del búfer en el control ActiveX de Yahoo! Webcam Viewer en ywcvwr.dll versión 2.0.1.4 para Yahoo! • https://www.exploit-db.com/exploits/4043 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 51%CPEs: 5EXPL: 0CVE-2007-1680 – Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2007-1680
03 Apr 2007 — Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties. Desbordamiento de búfer en la función createAndJoinConference en el control ActiveX AudioConf (yacscom.dll) en Yahoo! Messenger anterior a 20070313 permite a atacantes remotos ejecutar código de su elección a través de las propiedades (1) socksHostname y ... • http://messenger.yahoo.com/security_update.php?id=031207 •
CVSS: 8.2EPSS: 0%CPEs: 24EXPL: 0CVE-2007-0868
https://notcve.org/view.php?id=CVE-2007-0868
09 Feb 2007 — Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad no especificada en la funcionalidad Chat Room en Yahoo! Messenger 8.1.0.239 y anteriores permite a atacantes remotos provocar denegación de servicio a través de vectores no especificado. • http://osvdb.org/34696 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2007-0768 – Yahoo! Messenger 8.0 - Notification Message HTML Injection
https://notcve.org/view.php?id=CVE-2007-0768
06 Feb 2007 — Multiple cross-site scripting (XSS) vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG element to the (1) First Name, (2) Last Name, and (3) Nickname fields. NOTE: some of these details are obtained from third party information. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad Detalles de ... • https://www.exploit-db.com/exploits/29531 •
CVSS: 9.3EPSS: 6%CPEs: 7EXPL: 0CVE-2006-6603
https://notcve.org/view.php?id=CVE-2006-6603
15 Dec 2006 — Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information. Desbordamiento de búfer en el controlador YMMAPI.YMailAttach ActiveX (ymmapi.dll) anterior a 2005.1.1.4 en Yahoo! Messenger permote a un atacante remoto ejecutar código de su elección a través de un documento HTML manipulado. • http://messenger.yahoo.com/security_update.php?id=120806 •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2006-5563
https://notcve.org/view.php?id=CVE-2006-5563
27 Oct 2006 — Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Vulnerabilidad no especificada en Yahoo! Messenger (Service 18) anterior a 8.1.0.195 permite a atacantes remotos provocar una denegación de servicio (referencia a NULL y caída de aplicac... • http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0518.html •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2006-4975
https://notcve.org/view.php?id=CVE-2006-4975
25 Sep 2006 — Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service. Yahoo! Messenger para WAP permite guardar mensajes que contienen JavaScript, lo cual permite a atacantes con la complicidad del usuario inyectar secuencias de comandos web o HTML de su elección a través de una URL en el servicio en linea. • http://advisories.echo.or.id/adv/adv47-theday-2006.txt •
CVSS: 7.5EPSS: 4%CPEs: 2EXPL: 3CVE-2006-3298 – Yahoo! Messenger 7.0/7.5 - 'jscript.dll' Non-ASCII Character Denial of Service
https://notcve.org/view.php?id=CVE-2006-3298
29 Jun 2006 — Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, which triggers the crash in jscript.dll. Yahoo! Messenger v7.5.0.814 y v7.0.438 permite a atacantes remotos provocar una denegación de servicio (caída) a través de mensajes que contiene caracteres non-ASCII, lo que provoca la caída en jscript.dll. • https://www.exploit-db.com/exploits/28099 •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2005-1671
https://notcve.org/view.php?id=CVE-2005-1671
19 May 2005 — The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly warn later users that the feature has been enabled, which allows local users to obtain sensitive information from other users. • http://marc.info/?l=bugtraq&m=111643475210982&w=2 •
CVSS: 7.5EPSS: 4%CPEs: 3EXPL: 1CVE-2005-1618 – Yahoo! Messenger 5.x/6.0 - URL Handler Remote Denial of Service
https://notcve.org/view.php?id=CVE-2005-1618
16 May 2005 — The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server. • https://www.exploit-db.com/exploits/25658 •