Lucene search
HistoryJun 29, 2006 - 1:05 a.m.
CVE-2006-3298
yahoo
messenger
denial of service
vulnerability
nvd
cve-2006-3298
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.035 Low
EPSS
Percentile
91.6%
Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, which triggers the crash in jscript.dll.
Affected configurations
Node
yahoomessengerMatch7.0.438
ORyahoomessengerMatch7.5.0.814
| CPE | Name | Operator | Version |
|---|---|---|---|
| yahoo:messenger | yahoo messenger | eq | 7.0.438 |
| yahoo:messenger | yahoo messenger | eq | 7.5.0.814 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.035 Low
EPSS
Percentile
91.6%
Related for CVE-2006-3298