CVE-2005-0243

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-02-17 · updated 2026-06-16

Description

Yahoo! Messenger 6.0.0.1750, and possibly other versions before 6.0.0.1921, does not properly display long filenames in file dialog boxes, which could allow remote attackers to trick users into downloading and executing programs via file names containing a large number of spaces and multiple file extensions.

Affected products

yahoo Messenger: 5.5, 5.6, 5.6.0.1351, 6.0, 6.0.0.1750

References

http://secunia.com/advisories/13712
http://secunia.com/secunia_research/2005-2/advisory/
http://secunia.com/advisories/13712
http://secunia.com/secunia_research/2005-2/advisory/

Get alerted when CVE-2005-0243 or the next vulnerability affects your stack