CVE-2005-0242

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-02-18 · updated 2026-06-16

Description

The Audio Setup Wizard (asw.dll) in Yahoo! Messenger 6.0.0.1750, and possibly other versions, allows attackers to arbitrary code by placing a malicious ping.exe program into the Messenger program directory, which is installed with weak default permissions.

Affected products

yahoo Messenger: 5.5, 5.6, 5.6.0.1351, 6.0, 6.0.0.1750

References

http://messenger.yahoo.com/security/update6.html
http://secunia.com/advisories/11815
http://secunia.com/secunia_research/2004-6/advisory/
http://messenger.yahoo.com/security/update6.html
http://secunia.com/advisories/11815
http://secunia.com/secunia_research/2004-6/advisory/

Get alerted when CVE-2005-0242 or the next vulnerability affects your stack