Integer overflow

2012-01-1915:55:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.4%

JSON

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.

CPENameOperatorVersion
messengereq9.0.0.2123
messengereq10.0.0.525 beta
messengereq8.1.0.419
messengereq5.6
messengereq8.1.0.244
messengereq1.0
messengereq8.1.0.416
messengereq9.0.0.2162
messengereq5.6.0.1355
messengereq7.5.0.814

Name	Operator	Version
messenger	eq	9.0.0.2123
messenger	eq	10.0.0.525 beta
messenger	eq	8.1.0.419
messenger	eq	5.6
messenger	eq	8.1.0.244
messenger	eq	1.0
messenger	eq	8.1.0.416
messenger	eq	9.0.0.2162
messenger	eq	5.6.0.1355
messenger	eq	7.5.0.814