Approved changes feed: RSS · Atom

cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorYahoo (0dc01c4f-a37d-56de-8e72-74e1c6cb3fab)
ProductMessenger (a48c261f-e43a-5937-a657-6b9f53c3f699)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0268 vulnerable 2026-06-08 05:00:40.401253 Details available
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
Published: 2012-01-19T15:00:00.000Z
Updated: 2024-09-17T01:46:26.816Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0868 vulnerable 2026-06-08 04:49:33.596030 Details available
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2007-02-09T19:00:00.000Z
Updated: 2024-08-07T12:34:21.130Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6603 vulnerable 2026-06-08 04:49:29.291224 Details available
Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information.
Published: 2006-12-15T22:00:00.000Z
Updated: 2024-08-07T20:33:59.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0737 vulnerable 2026-06-08 04:48:13.488749 Details available
Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.
Published: 2005-03-13T05:00:00.000Z
Updated: 2024-09-17T02:01:33.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2361 vulnerable 2026-06-08 04:47:19.798681 Details available
The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.
Published: 2007-10-29T19:00:00.000Z
Updated: 2024-09-17T01:20:44.264Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1665 vulnerable 2026-06-08 04:46:24.234163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1664 vulnerable 2026-06-08 04:46:24.233878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0321 vulnerable 2026-06-08 04:46:21.191613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0320 vulnerable 2026-06-08 04:46:21.191297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0032 vulnerable 2026-06-08 04:46:20.445912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0031 vulnerable 2026-06-08 04:46:20.445359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.