Lucene search

K
cve[email protected]CVE-2007-4635
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2007-4635

2022-10-0316:14:33
CWE-119
CWE-20
web.nvd.nist.gov
22
yahoo! messenger
8.1.0.209
8.1.0.402
remote dos
buffer overflow
file transfer
cve-2007-4635

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.844 High

EPSS

Percentile

98.5%

Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe. NOTE: this might be related to CVE-2007-4515. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD
Node
yahoomessengerMatch8.1.0.209
OR
yahoomessengerMatch8.1.0.402

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.6 Medium

AI Score

Confidence

High

0.844 High

EPSS

Percentile

98.5%