Vulnerability CVE-2007-0868 - CERT Civis.Net

Vulnerability Name:

CVE-2007-0868 (CCN-32592)

Assigned:

2007-02-05

Published:

2007-02-05

Updated:

2008-11-15

Summary:

Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors.
Note: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS v3 Severity:

3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
4.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P)
2.1 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2007-0868

Source: CCN
Type: Yahoo! Messenger Web site
Yahoo! Messenger - Chat, Instant message, SMS, PC Calls and More

Source: OSVDB
Type: UNKNOWN
34696

Source: CCN
Type: OSVDB ID: 34696
Yahoo! Messenger Chat Room Functionality Unspecified Remote DoS

Source: BID
Type: UNKNOWN
22407

Source: CCN
Type: BID-22407
Yahoo! Messenger Chat Room Denial of Service Vulnerability

Source: XF
Type: UNKNOWN
yahoo-unspecified-dos(32592)

Vulnerable Configuration:

Configuration 1:

cpe:/a:yahoo:messenger:4.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.0.1046:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.0.1065:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.0.1232:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.5:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.5.1249:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1347:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1355:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1356:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1358:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0.0.1643:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0.0.1921:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:7.0.438:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:7.5.0.814:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.0.0.863:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.0_2005.1.1.4:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.1.0.209:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.1.0.239:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:yahoo:messenger:5.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0.0.1750:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:7.5.0.814:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.0.0.863:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.1.0.209:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:4.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.0.1046:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.0.1065:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.0.1232:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.5:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.5.1249:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1347:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1351:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1355:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1356:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:5.6.0.1358:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0.0.1643:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:6.0.0.1921:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.0:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.1.0.239:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:8.0_2005.1.1.4:*:*:*:*:*:*:*

OR cpe:/a:yahoo:messenger:7.0.438:*:*:*:*:*:*:*

Denotes that component is vulnerable