PT-2005-1323 · Yahoo · Yahoo! Messenger

Publicado 2005-02-17 · Atualizado 2008-09-05 · CVE-2005-0243

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger versions prior to 6.0.0.1921

Description The issue is related to the improper display of long filenames in file dialog boxes. This could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.

Recommendations For versions prior to 6.0.0.1921, update to version 6.0.0.1921 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-0243

Produtos afetados

Yahoo! Messenger

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-0243 · Nota de Segurança
• http://secunia.com/advisories/13712 · Aviso do Fabricante
• http://secunia.com/secunia_research/2005-2/advisory · Aviso do Fabricante