CVE-2006-5563: Medium severity Yahoo Messenger vulnerability

Published Oct 27, 2006

Updated

Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected Software

1 affected component

Yahoo Messenger=8.0

Remediation

Patch Available

http://secunia.com/advisories/22510

Event History

Oct 27, 2006

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:07 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5563?

CVE-2006-5563 is classified as a denial of service vulnerability that can cause application crashes.

How do I fix CVE-2006-5563?

To address CVE-2006-5563, upgrade Yahoo! Messenger to version 8.1.0.195 or later.

What systems are affected by CVE-2006-5563?

CVE-2006-5563 affects Yahoo! Messenger version 8.0.

Can CVE-2006-5563 be exploited remotely?

Yes, CVE-2006-5563 can be exploited remotely through crafted room names in Conference Invites.

What is the impact of CVE-2006-5563?

The impact of CVE-2006-5563 is that it may lead to a denial of service condition, resulting in application instability.