CVE-2012-0268

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...

CVE-2012-0268

CVE-2012-0268 describes an integer overflow in Yahoo! Messenger’s YImage.dll CYImage::LoadJPG when photo sharing is enabled, leading to a heap-based buffer overflow that could allow remote code execution via a crafted JPG. Affected are Yahoo! Messenger versions up to and including 11.5.0.155 (old...

PT-2012-2450

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger versions prior to 11.5.0.155 Description The issue is related to an integer overflow in the CYImage::LoadJPG method within the YImage.dll component of Yahoo! Messenger. This occurs when photo sharing is enabled and a crafted J...

CVE-2012-0268: Undefined Security Weakness

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow...

Yahoo Messenger ".jpg"文件处理缓冲区溢出漏洞

BUGTRAQ ID: 51405 CVE ID: CVE-2012-0268 Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger在实现上存在安全漏洞，可被恶意用户利用控制用户系统。 此漏洞源于在分配使用图形尺寸值的内存时，"CYImage::LoadJPG"方法YImage.dll中存在整数溢出漏洞，可通过特制的JPG文件造成堆缓冲区溢出。 0 Yahoo! Messenger 11.x 厂商补丁： Yahoo! ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://messenger.yahoo.co...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 7901)

Remote users could have crashed crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11.1 Security Update : pidgin (SAT Patch Number 5586)

Remote users could have crashed pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 1...

XSS vulnerability reported in Yahoo subdomain website

XSS vulnerability reported in Yahoo subdomain website Vansh Sharma & Vaibhuv Sharma from India Reported another important Cross site scripting XSS vulnerability in Yahoo subdomain as shown. Vulnerable Link : Cross-site scripting XSS is a type of computer security vulnerability typically found in...

[SECURITY] Fedora 15 Update: clearsilver-0.10.5-15.fc15

ClearSilver is a fast, powerful, and language-neutral HTML template system. In both static content sites and dynamic HTML applications, it provides a separation between presentation code and application logic which makes working with your project easier. The design of ClearSilver began in 1999, a...

Yahoo Babelfish Service - Cross Site Scripting Vulnerability

Document Title: =============== Yahoo Babelfish Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=349 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ===================================...

Yahoo Babelfish Service - Cross Site Scripting Vulnerability

Document Title: =============== Yahoo Babelfish Service - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=349 Release Date: ============= 2011-12-21 Vulnerability Laboratory ID VL-ID: ===================================...

Yahoo Babelfish Translator - Cross Site Scripting

Document Title: =============== Yahoo Babelfish Translator - Cross Site Scripting References: =========== Download: http://www.vulnerability-lab.com/resources/videos/350.wmv View: http://www.youtube.com/watch?v=u74PrIXydi4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=350 Release...

Yahoo Babelfish Translator - Cross Site Scripting

Document Title: =============== Yahoo Babelfish Translator - Cross Site Scripting References: =========== Download: http://www.vulnerability-lab.com/resources/videos/350.wmv View: http://www.youtube.com/watch?v=u74PrIXydi4 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=350 Release...

Yahoo Messenger Exploit Changes Status Messages

Security researchers at BitDefender are warning users about a new Yahoo! Messenger vulnerability that allows an attacker to change victims’ status updates. According to the security firm, the situation has been exploited in the wild to target version 11.x of the Messenger client. The vulnerabilit...

Yahoo! Mail Cross Site Request Forgery

======================================================================= YAHOOMAIL CSRF Vulnerability ======================================================================= Vulnerability found in- Yahoomail Delete Contact module email [email protected] company AKS IT Services Pvt. Ltd...

Yahoo! Toolbar YShortcut.dll ActiveX控件远程溢出漏洞

BUGTRAQ ID: 26956 Yahoo! Messenger是一种即时聊天工具。 Yahoo! Messenger的YShortcut.dll控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Messenger的YShortcut功能（YShortcut.dll，...

Yahoo! Toolbar yt.ythelper.2 ActiveX控件栈溢出漏洞

BUGTRAQ ID: 26656 CVECAN ID: CVE-2007-6228 Yahoo! Toolbar是一个IE插件，能够通过嵌入IE的工具栏帮助快速使用Yahoo搜索引擎、收发Yahoo电子邮件等操作。 Yahoo! Toolbar的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Yahoo! Toolbar所安装的yt.ythelper.2 ActiveX控件没有正确地验证对c方式所传送的参数，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发栈溢出，导致浏览器崩溃或执行任意指令。 Yahoo! Toolbar 1.4....

[USN-1273-1] Pidgin vulnerabilities

========================================================================== Ubuntu Security Notice USN-1273-1 November 21, 2011 pidgin vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu Update for pidgin USN-1273-1

Ubuntu Update for Linux kernel vulnerabilities USN-1273-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12731.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for pidgin USN-1273-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 10.04 LTS / 10.10 / 11.04 : pidgin vulnerabilities (USN-1273-1)

Marius Wachtler discovered that Pidgin incorrectly handled malformed YMSG messages in the Yahoo! protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 10.04 LTS and 10.10. CVE-2011-1091...