CVE-2007-3638

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-07-10 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka ZD-00000005. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.

Affected products

yahoo Messenger: 8.1

References

http://www.securityfocus.com/bid/24784
http://www.wslabi.com/wabisabilabi/initPublishedBid.do?
http://www.securityfocus.com/bid/24784
http://www.wslabi.com/wabisabilabi/initPublishedBid.do?

Get alerted when CVE-2007-3638 or the next vulnerability affects your stack