Skip to main content

Messenger CVE-2012-0268

MEDIUM
Numeric Errors (CWE-189)
2012-01-19 PSIRT-CNA@flexerasoftware.com
Buffer Overflow RCE Messenger
5.1
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:P/I:P/A:P
Attack Vector
Network
Attack Complexity
High
Confidentiality
P
Integrity
P
Availability
P

Lifecycle Timeline

1
CVE Published
Jan 19, 2012 - 15:55 cve.org
MEDIUM 5.1

DescriptionCVE.org

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.

AnalysisAI

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo!. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-189. Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow. Affected products include: Yahoo Messenger. Version information: before 11.5.0.155.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Messenger

View all
CVE-2014-7216 CRITICAL POC
9.3 Sep 11

Multiple stack-based buffer overflows in Yahoo!. Rated critical severity (CVSS 9.3), this vulnerability is remotely expl
CVE-2013-1085 CRITICAL
9.3 Mar 29

Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Mess
CVE-2022-41707 MEDIUM POC
6.5 Oct 19

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access sensitive data of any user o
CVE-2023-30097 MEDIUM POC
5.4 May 04

A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitr
CVE-2023-30096 MEDIUM POC
5.4 May 04

A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitr
CVE-2023-30095 MEDIUM POC
5.4 May 04

A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitr
CVE-2022-41708 MEDIUM POC
4.3 Oct 19

Relatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access existing chats in the worksp
CVE-2014-8688 HIGH
7.5 Mar 14

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Rated high severity (CVSS 7.5), this vu
CVE-2020-17476 MEDIUM
6.1 Aug 10

Mibew Messenger before 3.2.7 allows XSS via a crafted user name. Rated medium severity (CVSS 6.1), this vulnerability is

Same weakness CWE-189 – Numeric Errors

View all
CVE-2013-2094 HIGH POC
8.4
CVE-2015-3864 CRITICAL POC
10.0
CVE-2012-1182 CRITICAL POC
10.0
CVE-2015-1538 CRITICAL POC
10.0
CVE-2016-3645 CRITICAL POC
9.8
CVE-2015-3087 CRITICAL POC
10.0
CVE-2015-2470 CRITICAL POC
9.3
CVE-2013-4124 MEDIUM POC
5.0

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Share

CVE-2012-0268 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy