Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Yahoo! Messenger < 6.0.0.1921 Multiple DoS

Low

Synopsis

The remote host is vulnerable to a Denial of Service (DoS) attack.

Description

The remote host is running a version of Yahoo Instant Messenger that is reported vulnerable to a remote buffer overflow. An attacker exploiting this flaw would craft a malicious 'away' message and then entice an unsuspecting user to attempt to contact them. When the user receives the malicious 'away' message, the overflow would be triggered and code would be executed remotely. In addition, this version of Yahoo! Messenger is vulnerable to a remote Denial of Service (DoS) attack via a malformed YMSGR: URI.

Solution

Upgrade to version 6.0.0.1921 or higher.