Vulnerabilities > Yahoo > Messenger > 5.0

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1664 Information Disclosure vulnerability in Yahoo Messenger 5.0
Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.
network
low complexity
yahoo
6.4
2002-07-26 CVE-2002-0032 Unspecified vulnerability in Yahoo Messenger 5.0
Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
network
low complexity
yahoo
7.5
2002-07-26 CVE-2002-0031 Buffer Overflow vulnerability in Yahoo Messenger 5.0
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.
local
low complexity
yahoo
4.6
2002-06-25 CVE-2002-0321 Unspecified vulnerability in Yahoo Messenger 5.0
Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.
network
low complexity
yahoo
5.0
2002-06-25 CVE-2002-0320 Field Overflow vulnerability in Yahoo Messenger 5.0
Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.
network
low complexity
yahoo
7.5