medium5.0Public exploit code
CVE-2005-1618
The YMSGR URL handler in Yahoo!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yahoo! Messenger 5.x/6.0 - URL Handler Remote Denial of Service2005-05-13 · dos · windows · Verified
Impact
The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yahoo | Messenger | Versions 5.5, 5.6, 6.0 |