
CVE-2005-1618 – Yahoo! Messenger 5.x/6.0 - URL Handler Remote Denial of Service
https://notcve.org/view.php?id=CVE-2005-1618
16 May 2005 — The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server. • https://www.exploit-db.com/exploits/25658 •

CVE-2005-0737 – Yahoo! Messenger 5.x/6.0 - Offline Mode Status Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2005-0737
13 Mar 2005 — Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode. • https://www.exploit-db.com/exploits/25196 •

CVE-2005-0242
https://notcve.org/view.php?id=CVE-2005-0242
18 Feb 2005 — The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions. • http://messenger.yahoo.com/security/update6.html •

CVE-2005-0243
https://notcve.org/view.php?id=CVE-2005-0243
17 Feb 2005 — Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions. • http://secunia.com/advisories/13712 •