5.8
CVSSv2

CVE-2002-2361

Published: 31/12/2002 Updated: 05/09/2008
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote malicious users to install trojan programs via DNS spoofing.

Vulnerable Product Search on Vulmon Subscribe to Product

yahoo messenger 4.0

yahoo messenger 5.0

yahoo messenger 5.5