The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.
References
Link | Resource |
---|---|
http://messenger.yahoo.com/security/update6.html | |
http://secunia.com/advisories/11815 | Patch |
http://secunia.com/secunia_research/2004-6/advisory/ | Exploit Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2005-02-18T05:00:00
Updated: 2021-06-15T16:38:01
Reserved: 2005-02-08T00:00:00
Link: CVE-2005-0242
JSON object: View
NVD Information
Status : Analyzed
Published: 2005-02-18T05:00:00.000
Modified: 2008-09-05T20:45:44.103
Link: CVE-2005-0242
JSON object: View
Redhat Information
No data.
CWE