| Vulnerability Name: | CVE-2007-3638 (CCN-35798) | ||||||||
| Assigned: | 2007-07-02 | ||||||||
| Published: | 2007-07-02 | ||||||||
| Updated: | 2008-09-05 | ||||||||
| Summary: | Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka ZD-00000005. Note: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. | ||||||||
| CVSS v3 Severity: | 4.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 6.0 Medium (CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P) 4.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P/E:U/RL:U/RC:UR)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P/E:U/RL:U/RC:UR)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2007-3638 Source: CCN Type: Yahoo! Messenger Web site Yahoo! Messenger for the Web Source: CCN Type: OSVDB ID: 38220 Yahoo! Messenger Address Book E-mail Address Overflow Source: BID Type: UNKNOWN 24784 Source: CCN Type: BID-24784 Yahoo! Messenger 8.1 Unspecified Remote Buffer Overflow Vulnerability Source: CCN Type: WabiSabiLabi Web site Wabisabilabi Source: MISC Type: UNKNOWN http://www.wslabi.com/wabisabilabi/initPublishedBid.do? Source: XF Type: UNKNOWN yahoo-messenger-unspecified-bo(35798) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||