Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-6603

Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information.

Published

2006-12-15T22:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	yahoo	messenger	≤ 8.0	Yes
Application	yahoo	messenger	5.0	Yes
Application	yahoo	messenger	5.5	Yes
Application	yahoo	messenger	5.6	Yes
Application	yahoo	messenger	6.0	Yes
Application	yahoo	messenger	7.0	Yes
Application	yahoo	messenger	7.5	Yes

References

http://messenger.yahoo.com/security_update.php?id=120806 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/23401 Patch, Vendor Advisory ([email protected])
http://securitytracker.com/id?1017387 Patch ([email protected])
http://www.kb.cert.org/vuls/id/901852 Patch, US Government Resource ([email protected])
http://www.securityfocus.com/bid/21607 Patch ([email protected])
http://www.vupen.com/english/advisories/2006/5016 ([email protected])
http://messenger.yahoo.com/security_update.php?id=120806 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/23401 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1017387 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/901852 Patch, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/21607 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/5016 (af854a3a-2127-422b-91ae-364da2661108)