| Package | Affected versions | Patched versions |
|---|---|---|
| messenger | = 5.5= 5.6= 5.6.0.1351= 6.0= 6.0.0.1750 |
The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free