Security Advisory

CVE-2005-0242

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-02-18 05:00:00
Last updated 2024-08-07 21:05:25
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.