PT-2006-5718 · Yahoo · Yahoo! Messenger

Dedi Dwianto · Publicado 2006-09-25 · Atualizado 2018-10-17 · CVE-2006-4975

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger for WAP (affected versions not specified)

Description The issue allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service, due to the ability to save messages containing JavaScript.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-4975

Produtos afetados

Yahoo! Messenger

Referências · 4

• 🔥 http://advisories.echo.or.id/adv/adv47-theday-2006.txt · Exploit
• http://securityreason.com/securityalert/1626 · Nota
• http://securityfocus.com/archive/1/446414/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4975 · Nota de Segurança