Lucene search
HistoryFeb 18, 2005 - 5:00 a.m.
CVE-2005-0242
cve-2005-0242
yahoo! messenger
audio setup wizard
asw.dll
nvd
vulnerability
ping.exe
arbitrary code
weak default permissions
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.0%
The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.
Affected configurations
Node
yahoomessengerMatch5.5
ORyahoomessengerMatch5.6
ORyahoomessengerMatch5.6.0.1351
ORyahoomessengerMatch6.0
ORyahoomessengerMatch6.0.0.1750
Related
securityvulns
securityvulns
nvd
nvd
CVE-2005-0242
2005-02-18 05:00:00
cvelist
cvelist
CVE-2005-0242
2005-02-18 05:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.0%
Related for CVE-2005-0242