CVE-2012-0268 - CVE House

Status published Medium CVE-2012-0268

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo!...

5.1 CVSS

Vulnerability Description

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-0268

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

http://secunia.com/advisories/47041

More from yahoo

View All →

CVE-2022-24827

SQL Injection in elide-datastore-aggregation

High 8.1

CVE-2020-5289

Read permissions not enforced for client provided filter expressions in Elide http client

Medium 6.8

CVE-2019-16769

Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)

Medium 4.2

CVE-2014-7216

Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier...

Critical 9.3

CVE-2014-5881

The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android...

Medium 5.4

Affected Vendor

yahoo

View all reports →

Affected Software

messenger

Vulnerable Versions:

0, 0.99.17-1, 1.0, 1.0.4, 1.0.6, 2.0.1.4, 3.0, 3.0.1, 3.5, 4.0, 4.1, 5.0, 5.0.1046, 5.0.1065, 5.0.1232, 5.5, 5.5.1249, 5.6, 5.6.0.1347, 5.6.0.1351, 5.6.0.1355, 5.6.0.1356, 5.6.0.1358, 6.0, 6.0.0.1643, 6.0.0.1750, 6.0.0.1921, 6.1, 7.0, 7.0.0.426, 7.0.0.437, 7.0.438, 7.5, 7.5.0.814, 8.0, 8.0.0.505, 8.0.0.508, 8.0.0.701, 8.0.0.716, 8.0.0.863, 8.0.1, 8.0_2005.1.1.4, 8.1, 8.1.0.195, 8.1.0.209, 8.1.0.239, 8.1.0.244, 8.1.0.249, 8.1.0.401, 8.1.0.402, 8.1.0.413, 8.1.0.416, 8.1.0.419, 8.1.0.421, 9.0.0.797, 9.0.0.907, 9.0.0.922, 9.0.0.1389, 9.0.0.1912, 9.0.0.2018, 9.0.0.2034, 9.0.0.2112, 9.0.0.2123, 9.0.0.2128, 9.0.0.2133, 9.0.0.2136, 9.0.0.2152, 9.0.0.2160, 9.0.0.2161, 9.0.0.2162, 10.0.0.331, 10.0.0.525, 10.0.0.542, 10.0.0.1102, 10.0.0.1241, 10.0.0.1258, 10.0.0.1264, 10.0.0.1267, 10.0.0.1270, 11.0.0.1751, 11.0.0.2009, 11.0.0.2014

Timeline

Official Publish: January 19th, 2012

Last Modified: September 17th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.