Test Kennung:	1.3.6.1.4.1.25623.1.0.801150
Kategorie:	Denial of Service
Titel:	Yahoo! Messenger 'YahooBridgeLib.dll' ActiveX Control DoS Vulnerability
Zusammenfassung:	Yahoo! Messenger is prone to a denial of service (DoS); vulnerability.
Beschreibung:	Summary: Yahoo! Messenger is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to a NULL pointer dereference error in 'RegisterMe()' method in 'YahooBridgeLib.dll', which can be exploited by causing the victim to visit a specially crafted web page. Vulnerability Impact: Successful exploitation will allow remote attackers to cause Denial of Service condition on the affected application. Affected Software/OS: Yahoo! Messenger version 9.x to 9.0.0.2162 on Windows. Solution: Upgrade to Yahoo! Messenger version 10.0.0.1270 or later CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4171 BugTraq ID: 37007 http://www.securityfocus.com/bid/37007 Bugtraq: 20091112 Yahoo Messenger 9 ActiveX DoS (Null Pointer) Vulnerability (Google Search) http://www.securityfocus.com/archive/1/507818/100/0/threaded XForce ISS Database: yahoo-messenger-activex-dos(54263) https://exchange.xforce.ibmcloud.com/vulnerabilities/54263
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.