NetSight
medium5.0Public exploit code

CVE-2007-4635

Yahoo!

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe. NOTE: this might be related to CVE-2007-4515. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

VendorProductAffected versions
YahooMessenger
Versions 8.1.0.209, 8.1.0.402

Weakness classification

References