Approved changes feed: RSS · Atom
cpe:2.3:a:yahoo:messenger:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Yahoo (0dc01c4f-a37d-56de-8e72-74e1c6cb3fab) |
|---|---|
| Product | Messenger (a48c261f-e43a-5937-a657-6b9f53c3f699) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-54330 |
vulnerable | 2026-06-08 06:19:40.532839 |
Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow
CRITICAL (9.8)
Inbit Messenger versions 4.6.0 to 4.9.0 contain a remote stack-based buffer overflow vulnerability that allows unauthenticated attackers to execute arbitrary code by sending malformed network packets. Attackers can craft a specially designed payload targeting the messenger's network handler to overwrite the Structured Exception Handler (SEH) and execute shellcode on vulnerable Windows systems.
Published: 2026-01-13T22:52:05.767Z
Updated: 2026-03-05T01:29:41.232Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54329 |
vulnerable | 2026-06-08 06:19:40.532324 |
Inbit Messenger 4.9.0 - Unauthenticated Remote Command Execution (RCE)
CRITICAL (9.8)
Inbit Messenger 4.6.0 - 4.9.0 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by exploiting a stack overflow in the messenger's protocol. Attackers can send specially crafted XML packets to port 10883 with a malicious payload to trigger the vulnerability and execute commands with system privileges.
Published: 2026-01-13T22:52:05.350Z
Updated: 2026-03-05T01:29:40.439Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7216 |
vulnerable | 2026-06-08 05:05:58.999173 |
Details available
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
Published: 2015-09-11T20:00:00.000Z
Updated: 2024-08-06T12:40:19.202Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0268 |
vulnerable | 2026-06-08 05:00:40.393302 |
Details available
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
Published: 2012-01-19T15:00:00.000Z
Updated: 2024-09-17T01:46:26.816Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4515 |
vulnerable | 2026-06-08 04:49:56.451795 |
Details available
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.
Published: 2007-08-31T22:00:00.000Z
Updated: 2024-08-07T15:01:09.859Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0768 |
vulnerable | 2026-06-08 04:49:33.295052 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6603 |
vulnerable | 2026-06-08 04:49:29.290477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4975 |
vulnerable | 2026-06-08 04:49:19.432052 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0043 |
vulnerable | 2026-06-08 04:47:48.152962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.