PT-2012-2450
CVE-2012-0268
·
تاريخ النشر
2012-01-19
·
تاريخ التحديث
2012-01-23
الوصف من
CVSS 2.0
5.1
متوسطةالمقاييسAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Yahoo! Messenger versions prior to 11.5.0.155
Description
The issue is related to an integer overflow in the CYImage::LoadJPG method within the YImage.dll component of Yahoo! Messenger. This occurs when photo sharing is enabled and a crafted JPG image is used, potentially triggering a heap-based buffer overflow. This could allow remote attackers to execute arbitrary code.
Recommendations
For versions prior to 11.5.0.155, update to version 11.5.0.155 or later to resolve the issue. As a temporary workaround, consider disabling photo sharing until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾