PT-2006-5718 · Yahoo · Yahoo! Messenger

Dedi Dwianto · Published 2006-09-25 · Updated 2018-10-17 · CVE-2006-4975

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger for WAP (affected versions not specified)

Description The issue allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service, due to the ability to save messages containing JavaScript.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4975

Affected Products

Yahoo! Messenger

References · 4

• 🔥 http://advisories.echo.or.id/adv/adv47-theday-2006.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4975 · Security Note
• http://securityreason.com/securityalert/1626 · Note
• http://securityfocus.com/archive/1/446414/100/0/threaded · Note