PT-2005-1323 · Yahoo · Yahoo! Messenger

Published 2005-02-17 · Updated 2008-09-05 · CVE-2005-0243

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger versions prior to 6.0.0.1921

Description The issue is related to the improper display of long filenames in file dialog boxes. This could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.

Recommendations For versions prior to 6.0.0.1921, update to version 6.0.0.1921 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-0243

Affected Products

Yahoo! Messenger

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-0243 · Security Note
• http://secunia.com/advisories/13712 · Vendor Advisory
• http://secunia.com/secunia_research/2005-2/advisory · Vendor Advisory