CVE-2006-6603

CVE-2006-6603 is a buffer overflow in Yahoo! Messenger’s YMMAPI.YMailAttach ActiveX control (ymmapi.dll). A crafted HTML document could trigger code execution with the user’s privileges. The vulnerability affects Yahoo! Messenger prior to version 2005.1.1.4; Yahoo’s security update fixes versions...

Yahoo Messenger YMailAttach ActiveX control buffer overflow

Overview The Yahoo Messenger YMailAttach ActiveX control contains a buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo Messenger is an instant messaging application. Yahoo Messenger includes several ActiveX...