CVE-2007-5017 Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arb...
MediumCVSS 5.0
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo messenger | = 8.1.0.421 | No fix listed |
References
- 38296 vdb-entry
- 25727 exploit vdb-entry
- 1018715 vdb-entry
- www.shinnai.altervista.org
- yahoo-messenger-ft60-code-execution(36694) vdb-entry
- 4428 exploit