What’s Vulnerable › Vulnerabilities

CVE-2002-1664

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-12-31 · updated 2026-06-16

Description

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.

Affected products

• yahoo Messenger: 5.0

References

• http://marc.info/?l=bugtraq&m=101439616623230&w=2
• http://www.cert.org/advisories/CA-2002-16.html
• http://www.kb.cert.org/vuls/id/393195
• http://marc.info/?l=bugtraq&m=101439616623230&w=2
• http://www.cert.org/advisories/CA-2002-16.html
• http://www.kb.cert.org/vuls/id/393195

Get alerted when CVE-2002-1664 or the next vulnerability affects your stack