Browse CVEs

MEDIUM 5.4 CVE-2014-5881 The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows m… Yahoo Ybox Mitigation only Fix from $1,6002014-09-11 MEDIUM 6.8 CVE-2007-6535 Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a… Toolbar Mitigation only Fix from $1,6002007-12-27 MEDIUM 6.8 CVE-2007-6228 Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denia… Toolbar No fix yet Fix from $1,6002007-12-04 MEDIUM 5.0 CVE-2007-5017 Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attacke… Messenger No fix yet Fix from $1,6002007-09-20 MEDIUM 5.0 CVE-2007-4635 Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, … Messenger No fix yet Fix from $1,6002007-08-31 HIGH 9.3 CVE-2007-4391EPSS 9% Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application cra… Messenger Mitigation only Fix from $1,9502007-08-17 MEDIUM 6.0 CVE-2007-3638 Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code… Messenger No fix yet Fix from $1,6002007-07-10 MEDIUM 5.0 CVE-2007-2385 The Yahoo! UI framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers… Ui Library Mitigation only Fix from $1,6002007-04-30 MEDIUM 5.0 CVE-2007-0868 Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of servi… Messenger No fix yet Fix from $1,6002007-02-09 MEDIUM 5.0 CVE-2006-3298 Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, w… Messenger No fix yet Fix from $1,6002006-06-29 MEDIUM 5.0 CVE-2005-1618 The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a roo… Messenger Mitigation only Fix from $1,6002005-05-16 HIGH 7.5 CVE-2005-0737 Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode. Messenger No fix yet Fix from $1,9502005-05-02 MEDIUM 5.8 CVE-2002-2361 The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs v… Messenger Mitigation only Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-0322 Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing. Messenger Mitigation only Fix from $1,9502002-06-25 MEDIUM 5.0 CVE-2000-0047 Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message. Pager Mitigation only Fix from $1,6001999-10-01