CVE-2002-2361: Medium severity Yahoo Messenger vulnerability
Published Dec 31, 2002
·Updated
The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.
Affected Software
3 affected components
Yahoo Messenger=5.5
Yahoo Messenger=5.0
Yahoo Messenger=4.0
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Oct 29, 2007
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2361?
CVE-2002-2361 is considered a high severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2002-2361?
To fix CVE-2002-2361, it is recommended to uninstall vulnerable versions of Yahoo Messenger and upgrade to a later version that addresses this issue.
3
What versions of Yahoo Messenger are affected by CVE-2002-2361?
CVE-2002-2361 affects Yahoo Messenger versions 4.0, 5.0, and 5.5.
4
Can CVE-2002-2361 be exploited through DNS spoofing?
Yes, CVE-2002-2361 can be exploited via DNS spoofing, allowing attackers to install malicious software.
5
What risks does CVE-2002-2361 pose to users?
CVE-2002-2361 poses risks such as unauthorized installation of trojan programs and potential data breaches.