Full Disclosure mailing list archives
Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow
From: Dave Sherohman <esper () sherohman org>
Date: Wed, 3 Dec 2003 13:35:36 -0600
On Wed, Dec 03, 2003 at 12:06:56AM -0800, Tri Huynh wrote:
Yahoo Instant Messenger YAUTO.DLL buffer overflow ================================================= PROGRAM: Yahoo Instant Messenger (YIM) HOMEPAGE: http://messenger.yahoo.com VULNERABLE VERSIONS: 5.6.0.1347 and below
I have checked my sysem and it appears that my installation of YIM does not include a YAUTO.DLL. Judging by your description of the issue being an ActiveX problem, I must suspect that only Windows versions of YIM are affected. In future reports, you may wish to indicate the relevant operating system(s) along with the "vulnerable versions", as failing to do so can only harm your credibility. -- The freedoms that we enjoy presently are the most important victories of the White Hats over the past several millennia, and it is vitally important that we don't give them up now, only because we are frightened. - Eolake Stobblehouse (http://stobblehouse.com/text/battle.html) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Yahoo Instant Messenger YAUTO.DLL buffer overflow Tri Huynh (Dec 02)
- RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow Kristian Hermansen (Dec 02)
- Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow Dave Sherohman (Dec 03)
- Re: Yahoo Instant Messenger YAUTO.DLL buffer overflow Marc Bejarano (Dec 09)
- <Possible follow-ups>
- RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow trihuynh () zeeup com (Dec 03)
- Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow De Blanc (Dec 03)
- RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow Kristian Hermansen (Dec 04)
- Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow Tri Huynh (Dec 04)
- RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow Kristian Hermansen (Dec 04)
- RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow dave kleiman (Dec 04)
- RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow List Account (Dec 04)
- RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow Kristian Hermansen (Dec 04)
- Re: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow Boris Veytsman (Dec 04)
- RE: RE: Yahoo Instant Messenger YAUTO.DLL buffer overflow dave kleiman (Dec 04)
(Thread continues...)