Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information.
| Software | From | Fixed in |
|---|---|---|
| yahoo / messenger | 5.6 | 5.6.x |
| yahoo / messenger | 7.0 | 7.0.x |
| yahoo / messenger | 7.5 | 7.5.x |
| yahoo / messenger | 5.5 | 5.5.x |
| yahoo / messenger | - | 8.0.x |
| yahoo / messenger | 5.0 | 5.0.x |
| yahoo / messenger | 6.0 | 6.0.x |