CVE-2005-1618

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

3.16% chance of exploitation in the next 30 days, 87th percentile

Published

2005-05-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25658

References

• CVE Record
• NVD entry

Related

• CVE-2005-1615
• CVE-2005-1619
• CVE-2005-1614
• CVE-2005-1620
• CVE-2005-1613
• CVE-2005-1628