Yahoo! Messenger < Multiple Vulnerabilities

High Nessus Plugin ID 25932


The instant messaging application on the remote Windows host is affected by multiple vulnerabilities.


The version of Yahoo! Messenger installed on the remote host is reportedly affected by a buffer overflow as well as a denial of service vulnerability, both involving its video chat feature.

If an attacker can trick a user on the affected host into accepting a webcam invitation, these issues could be leveraged to crash the affected application or execute arbitrary code on the host subject to the user's privileges.


Upgrade to Yahoo! Messenger version or later.

See Also

Plugin Details

Severity: High

ID: 25932

File Name: yahoo_msgr_8_1_0_416.nasl

Version: $Revision: 1.14 $

Type: local

Agent: windows

Family: Windows

Published: 2007/08/27

Modified: 2017/06/12

Dependencies: 11432

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:U/RC:ND

Vulnerability Information

CPE: cpe:/a:yahoo:messenger

Required KB Items: SMB/Yahoo/Messenger/Version

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 2007/08/12

Reference Information

CVE: CVE-2007-4391

BID: 25330

OSVDB: 38221

CWE: 20, 119