Yahoo Messenger 9.0.0.2160

CPE Details

Yahoo Messenger 9.0.0.2160
yahoo
messenger
9.0.0.2160
2012-01-20
16h58 +00:00
2012-02-10
18h53 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:yahoo:messenger:9.0.0.2160:*:*:*:*:*:*:*

Informations

Vendor

yahoo

Product

messenger

Version

9.0.0.2160

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2014-7216 2015-09-11 18h00 +00:00 Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
9.3
CVE-2012-0268 2012-01-19 15h00 +00:00 Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
5.1
CVE-2006-4975 2006-09-24 23h00 +00:00 Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service.
2.6
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.