PT-2012-2450

CVE-2012-0268

·

Publicado

2012-01-19

·

Atualizado

2012-01-23

Descrição por

CVSS 2.0
5.1
Média
MétricasAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Yahoo! Messenger versions prior to 11.5.0.155
Description The issue is related to an integer overflow in the CYImage::LoadJPG method within the YImage.dll component of Yahoo! Messenger. This occurs when photo sharing is enabled and a crafted JPG image is used, potentially triggering a heap-based buffer overflow. This could allow remote attackers to execute arbitrary code.
Recommendations For versions prior to 11.5.0.155, update to version 11.5.0.155 or later to resolve the issue. As a temporary workaround, consider disabling photo sharing until the update is applied.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-189
Identificadores relacionados
CVE-2012-0268
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com