Remote Code Execution Vulnerability in Yahoo! Messenger
CVE-2005-0737

Currently unrated

Key Information:

Vendor

Yahoo

Status
Messenger
Vendor
CVE Published:
2 May 2005

What is CVE-2005-0737?

A vulnerability in Yahoo! Messenger exposes users to potential remote code execution through a buffer overflow when utilizing the offline mode feature. This flaw allows attackers to exploit the software by sending specially crafted data, which can lead to uncontrolled execution of arbitrary code within the application. Users of affected versions of Yahoo! Messenger are advised to take immediate action to mitigate risks associated with this security flaw.

References

http://seclists.org/lists/fulldisclosure/2005/Mar/0284.html
mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/12750
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.