Lucene search
HistoryDec 02, 2009 - 7:30 p.m.
CVE-2009-4171
cve-2009-4171
activex control
yahoo! messenger
denial of service
remote attack
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.4%
An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by calling the RegisterMe method with a long argument.
Affected configurations
Node
yahoomessengerMatch9.0.0.2162
| CPE | Name | Operator | Version |
|---|---|---|---|
| yahoo:messenger | yahoo messenger | eq | 9.0.0.2162 |
Related
prion
prion
Null pointer dereference
2009-12-02 19:30:00
openvas
openvas
Yahoo! Messenger 'YahooBridgeLib.dll' ActiveX Control DoS Vulnerability
2009-12-08 00:00:00
cvelist
cvelist
CVE-2009-4171
2009-12-02 19:00:00
nvd
nvd
CVE-2009-4171
2009-12-02 19:30:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.4%
Related for CVE-2009-4171