Description
Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.
References
- CA-2002-16 third-party-advisory
- 20020221 Remote crashes in Yahoo messenger mailing-list
- VU#393195 third-party-advisory