Description
Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information.
References
- 1017387 vdb-entry
- 21607 vdb-entry
- VU#901852 third-party-advisory
- ADV-2006-5016 vdb-entry
- http://messenger.yahoo.com/security_update.php?id=120806
- 23401 third-party-advisory