| Package | Affected versions | Patched versions |
|---|---|---|
| messenger | = 0.99.17-1= 1.0= 1.0.4= 1.0.6= 10.0.0.1102= 10.0.0.1241= 10.0.0.1258= 10.0.0.1264= 10.0.0.1267= 10.0.0.1270= 10.0.0.331= 10.0.0.525= 10.0.0.542= 11.0.0.1751= 11.0.0.2009= 11.0.0.2014= 2.0.1.4= 3.0= 3.0.1= 3.5= 4.0= 4.1= 5.0= 5.0.1046= 5.0.1065= 5.0.1232= 5.5= 5.5.1249= 5.6= 5.6.0.1347= 5.6.0.1351= 5.6.0.1355= 5.6.0.1356= 5.6.0.1358= 6.0= 6.0.0.1643= 6.0.0.1750= 6.0.0.1921= 6.1= 7.0= 7.0.0.426= 7.0.0.437= 7.0.438= 7.5= 7.5.0.814= 8.0= 8.0.0.505= 8.0.0.508= 8.0.0.701= 8.0.0.716= 8.0.0.863= 8.0.1= 8.0_2005.1.1.4= 8.1= 8.1.0.195= 8.1.0.209= 8.1.0.239= 8.1.0.244= 8.1.0.249= 8.1.0.401= 8.1.0.402= 8.1.0.413= 8.1.0.416= 8.1.0.419= 8.1.0.421= 9.0.0.1389= 9.0.0.1912= 9.0.0.2018= 9.0.0.2034= 9.0.0.2112= 9.0.0.2123= 9.0.0.2128= 9.0.0.2133= 9.0.0.2136= 9.0.0.2152= 9.0.0.2160= 9.0.0.2161= 9.0.0.2162= 9.0.0.797= 9.0.0.907= 9.0.0.922≤ 11.5.0.152 |
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free