critical9.3
CVE-2006-6603
Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo!
Impact
Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yahoo | Messenger | through 8.0 Versions 5.0, 5.5, 5.6, 6.0, 7.0 |
References
- NVD record
- CVE.org record
- http://messenger.yahoo.com/security_update.php?id=120806
- http://secunia.com/advisories/23401
- http://securitytracker.com/id?1017387
- http://www.kb.cert.org/vuls/id/901852
- http://www.securityfocus.com/bid/21607
- http://www.vupen.com/english/advisories/2006/5016
- http://messenger.yahoo.com/security_update.php?id=120806
- http://secunia.com/advisories/23401
- http://securitytracker.com/id?1017387
- http://www.kb.cert.org/vuls/id/901852
- http://www.securityfocus.com/bid/21607
- http://www.vupen.com/english/advisories/2006/5016