CVE-2006-3298: Medium severity Yahoo Messenger vulnerability
Published Jun 29, 2006
·Updated
Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, which triggers the crash in jscript.dll.
Affected Software
2 affected components
Yahoo Messenger=7.5.0.814
Yahoo Messenger=7.0.438
Event History
Jun 29, 2006
CVE Published
01:05 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3298?
CVE-2006-3298 is classified as a denial of service vulnerability that can crash Yahoo! Messenger.
2
What versions of Yahoo! Messenger are affected by CVE-2006-3298?
CVE-2006-3298 affects Yahoo! Messenger versions 7.5.0.814 and 7.0.438.
3
How do I fix CVE-2006-3298?
To mitigate CVE-2006-3298, users should upgrade to the latest version of Yahoo! Messenger that is not affected by this vulnerability.
4
How does CVE-2006-3298 operate?
CVE-2006-3298 operates by causing a crash in jscript.dll when non-ASCII characters are included in messages.
5
Who can exploit CVE-2006-3298?
CVE-2006-3298 can be exploited by remote attackers sending specially crafted messages to affected versions of Yahoo! Messenger.