CVE-2005-1618 The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an...
MediumCVSS 5.0
EPSS 3.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo messenger | = 5.5 | No fix listed |
| yahoo messenger | = 5.6 | No fix listed |
| yahoo messenger | = 6.0 | No fix listed |
References
- 20050513 Yahoo! Messenger URL Handler Remote DoS Vulnerability mailing-list
- 16816 vdb-entry
- 13626 vdb-entry