CVE-2009-4171

An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by calling the RegisterMe method with a long argument.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

5.09% chance of exploitation in the next 30 days, 92th percentile

Published

2009-12-02

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/33350
• https://www.exploit-db.com/exploits/10092

References

• CVE Record
• NVD entry

Related

• CVE-2009-4170
• CVE-2009-4172
• CVE-2009-4168
• CVE-2009-4173
• CVE-2009-4157
• CVE-2009-4174