CVE-2012-0268
Severity Score
5.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
Un desbordamiento de entero en el método CYImage::LoadJPG en YImage.dll en Yahoo! Messenger antes de v11.5.0.155, cuando la compartición fotos está activada, podría permitir a atacantes remotos ejecutar código de su elección a través de una imagen JPG modificada a mano que genera un desbordamiento de búfer basado en memoria dinámica(montículo).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-12-30 CVE Reserved
- 2012-01-19 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-189: Numeric Errors
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/47041 | 2012-01-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | <= 11.5.0.152 Search vendor "Yahoo" for product "Messenger" and version " <= 11.5.0.152" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 0.99.17-1 Search vendor "Yahoo" for product "Messenger" and version "0.99.17-1" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 1.0 Search vendor "Yahoo" for product "Messenger" and version "1.0" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 1.0.4 Search vendor "Yahoo" for product "Messenger" and version "1.0.4" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 1.0.6 Search vendor "Yahoo" for product "Messenger" and version "1.0.6" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 2.0.1.4 Search vendor "Yahoo" for product "Messenger" and version "2.0.1.4" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 3.0 Search vendor "Yahoo" for product "Messenger" and version "3.0" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 3.0.1 Search vendor "Yahoo" for product "Messenger" and version "3.0.1" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 3.0.1 Search vendor "Yahoo" for product "Messenger" and version "3.0.1" | beta-35554 |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 3.5 Search vendor "Yahoo" for product "Messenger" and version "3.5" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 4.0 Search vendor "Yahoo" for product "Messenger" and version "4.0" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 4.1 Search vendor "Yahoo" for product "Messenger" and version "4.1" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.0 Search vendor "Yahoo" for product "Messenger" and version "5.0" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.0.1046 Search vendor "Yahoo" for product "Messenger" and version "5.0.1046" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.0.1065 Search vendor "Yahoo" for product "Messenger" and version "5.0.1065" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.0.1232 Search vendor "Yahoo" for product "Messenger" and version "5.0.1232" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.5 Search vendor "Yahoo" for product "Messenger" and version "5.5" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.5.1249 Search vendor "Yahoo" for product "Messenger" and version "5.5.1249" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.6 Search vendor "Yahoo" for product "Messenger" and version "5.6" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.6.0.1347 Search vendor "Yahoo" for product "Messenger" and version "5.6.0.1347" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.6.0.1351 Search vendor "Yahoo" for product "Messenger" and version "5.6.0.1351" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.6.0.1355 Search vendor "Yahoo" for product "Messenger" and version "5.6.0.1355" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.6.0.1356 Search vendor "Yahoo" for product "Messenger" and version "5.6.0.1356" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 5.6.0.1358 Search vendor "Yahoo" for product "Messenger" and version "5.6.0.1358" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 6.0 Search vendor "Yahoo" for product "Messenger" and version "6.0" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 6.0.0.1643 Search vendor "Yahoo" for product "Messenger" and version "6.0.0.1643" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 6.0.0.1750 Search vendor "Yahoo" for product "Messenger" and version "6.0.0.1750" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 6.0.0.1921 Search vendor "Yahoo" for product "Messenger" and version "6.0.0.1921" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 6.1 Search vendor "Yahoo" for product "Messenger" and version "6.1" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 7.0 Search vendor "Yahoo" for product "Messenger" and version "7.0" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 7.0.0.426 Search vendor "Yahoo" for product "Messenger" and version "7.0.0.426" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 7.0.0.437 Search vendor "Yahoo" for product "Messenger" and version "7.0.0.437" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 7.0.438 Search vendor "Yahoo" for product "Messenger" and version "7.0.438" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 7.5 Search vendor "Yahoo" for product "Messenger" and version "7.5" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 7.5.0.814 Search vendor "Yahoo" for product "Messenger" and version "7.5.0.814" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0 Search vendor "Yahoo" for product "Messenger" and version "8.0" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0.0.505 Search vendor "Yahoo" for product "Messenger" and version "8.0.0.505" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0.0.508 Search vendor "Yahoo" for product "Messenger" and version "8.0.0.508" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0.0.701 Search vendor "Yahoo" for product "Messenger" and version "8.0.0.701" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0.0.716 Search vendor "Yahoo" for product "Messenger" and version "8.0.0.716" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0.0.863 Search vendor "Yahoo" for product "Messenger" and version "8.0.0.863" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0.1 Search vendor "Yahoo" for product "Messenger" and version "8.0.1" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.0_2005.1.1.4 Search vendor "Yahoo" for product "Messenger" and version "8.0_2005.1.1.4" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1 Search vendor "Yahoo" for product "Messenger" and version "8.1" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.195 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.195" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.209 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.209" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.239 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.239" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.244 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.244" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.249 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.249" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.401 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.401" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.402 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.402" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.413 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.413" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.416 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.416" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.419 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.419" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 8.1.0.421 Search vendor "Yahoo" for product "Messenger" and version "8.1.0.421" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.797 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.797" | beta |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.907 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.907" | beta |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.922 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.922" | beta |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.1389 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.1389" | beta |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.1912 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.1912" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2018 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2018" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2034 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2034" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2112 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2112" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2123 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2123" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2128 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2128" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2133 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2133" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2136 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2136" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2152 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2152" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2160 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2160" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2161 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2161" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 9.0.0.2162 Search vendor "Yahoo" for product "Messenger" and version "9.0.0.2162" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.331 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.331" | pre-alpha |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.525 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.525" | beta |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.542 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.542" | beta |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.1102 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.1102" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.1241 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.1241" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.1258 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.1258" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.1264 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.1264" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.1267 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.1267" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 10.0.0.1270 Search vendor "Yahoo" for product "Messenger" and version "10.0.0.1270" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 11.0.0.1751 Search vendor "Yahoo" for product "Messenger" and version "11.0.0.1751" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 11.0.0.2009 Search vendor "Yahoo" for product "Messenger" and version "11.0.0.2009" | - |
Affected
| ||||||
| Yahoo Search vendor "Yahoo" | Messenger Search vendor "Yahoo" for product "Messenger" | 11.0.0.2014 Search vendor "Yahoo" for product "Messenger" and version "11.0.0.2014" | - |
Affected
| ||||||