Vulnerabilities > CVE-2005-0242 - Unspecified vulnerability in Yahoo Messenger
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 5 |