CVE-2002-1664: Medium severity Yahoo Messenger vulnerability
Published Dec 31, 2002
·Updated
Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.
Affected Software
1 affected component
Yahoo Messenger=5.0
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
May 28, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1664?
The severity of CVE-2002-1664 is considered moderate due to the potential for unauthorized access to buddy lists.
2
How do I fix CVE-2002-1664?
To fix CVE-2002-1664, upgrade to a version of Yahoo! Messenger released after February 2002.
3
Who is affected by CVE-2002-1664?
Users of Yahoo! Messenger version 5.0 prior to February 2002 are affected by CVE-2002-1664.
4
What type of attack is associated with CVE-2002-1664?
CVE-2002-1664 is associated with a remote attack that allows the addition of arbitrary users to another user's buddy list.
5
What information could be compromised by CVE-2002-1664?
CVE-2002-1664 could potentially allow attackers to obtain sensitive information from the affected user's buddy list.