full-disclosure - Yahoo Instant Messenger YAUTO.DLL buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031203193536.GG9190@sherohman.org>
From: esper at sherohman.org (Dave Sherohman)
Subject: Yahoo Instant Messenger YAUTO.DLL buffer overflow

On Wed, Dec 03, 2003 at 12:06:56AM -0800, Tri Huynh wrote:
> Yahoo Instant Messenger YAUTO.DLL buffer overflow
> =================================================
> 
> PROGRAM: Yahoo Instant Messenger (YIM)
> HOMEPAGE: http://messenger.yahoo.com
> VULNERABLE VERSIONS: 5.6.0.1347 and below

I have checked my sysem and it appears that my installation of YIM
does not include a YAUTO.DLL.  Judging by your description of the
issue being an ActiveX problem, I must suspect that only Windows
versions of YIM are affected.  In future reports, you may wish to
indicate the relevant operating system(s) along with the "vulnerable
versions", as failing to do so can only harm your credibility.

-- 
The freedoms that we enjoy presently are the most important victories of the
White Hats over the past several millennia, and it is vitally important that
we don't give them up now, only because we are frightened.
  - Eolake Stobblehouse (http://stobblehouse.com/text/battle.html)