Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yahoo Messenger ‘.jpg’文件处理缓冲区溢出漏洞
Vulnerability Description
Yahoo! Messenger是一款流行的即时通信软件。 Yahoo! Messenger在实现上存在安全漏洞,恶意用户可利用该漏洞控制用户系统。该漏洞源于在分配使用图形尺寸值的内存时,"CYImage::LoadJPG()"方法(YImage.dll)中存在整数溢出漏洞,可通过特制的JPG文件造成堆缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A