CVE-2007-5017

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 20/09/2007 Updated: 29/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote malicious users to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yahoo messenger 8.1.0.421

<pre> <code><span style="font: 10pt Courier New;"><span class="general1-symbol"><body bgcolor="#E0E0E0">----------------------------------------------------------------------------- <b>Yahoo! Messenger 810421 CYFT Object (ft60dll) Arbitrary File Download</b> url: downloadyahoocom/dl/msgr8/us/ ...

CWE-22 http://www.securityfocus.com/bid/25727 http://www.shinnai.altervista.org/exploits/txt/TXT_KJDPaI2IlM5P9PP6N6dI.html http://www.securitytracker.com/id?1018715 http://osvdb.org/38296 https://exchange.xforce.ibmcloud.com/vulnerabilities/36694 https://www.exploit-db.com/exploits/4428 https://nvd.nist.gov https://www.exploit-db.com/exploits/4428/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-5017

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect