CVE-2012-0268

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.

• yahoo messenger (<= 11.5.0.152) • yahoo messenger 0.99.17-1 • yahoo messenger 1.0 • yahoo messenger 1.0.4 • yahoo messenger 1.0.6 • yahoo messenger 2.0.1.4 • yahoo messenger 3.0 • yahoo messenger 3.0.1 • yahoo messenger 3.5 • yahoo messenger 4.0 • yahoo messenger 4.1 • yahoo messenger 5.0 • yahoo messenger 5.0.1046 • yahoo messenger 5.0.1065 • yahoo messenger 5.0.1232 • yahoo messenger 5.5 • yahoo messenger 5.5.1249 • yahoo messenger 5.6 • yahoo messenger 5.6.0.1347 • yahoo messenger 5.6.0.1351 • yahoo messenger 5.6.0.1355 • yahoo messenger 5.6.0.1356 • yahoo messenger 5.6.0.1358 • yahoo messenger 6.0 • yahoo messenger 6.0.0.1643 • yahoo messenger 6.0.0.1750 • yahoo messenger 6.0.0.1921 • yahoo messenger 6.1 • yahoo messenger 7.0 • yahoo messenger 7.0.0.426 • yahoo messenger 7.0.0.437 • yahoo messenger 7.0.438 • yahoo messenger 7.5 • yahoo messenger 7.5.0.814 • yahoo messenger 8.0 • yahoo messenger 8.0.0.505 • yahoo messenger 8.0.0.508 • yahoo messenger 8.0.0.701 • yahoo messenger 8.0.0.716 • yahoo messenger 8.0.0.863 • yahoo messenger 8.0.1 • yahoo messenger 8.0 2005.1.1.4 • yahoo messenger 8.1 • yahoo messenger 8.1.0.195 • yahoo messenger 8.1.0.209 • yahoo messenger 8.1.0.239 • yahoo messenger 8.1.0.244 • yahoo messenger 8.1.0.249 • yahoo messenger 8.1.0.401 • yahoo messenger 8.1.0.402 • yahoo messenger 8.1.0.413 • yahoo messenger 8.1.0.416 • yahoo messenger 8.1.0.419 • yahoo messenger 8.1.0.421 • yahoo messenger 9.0.0.797 • yahoo messenger 9.0.0.907 • yahoo messenger 9.0.0.922 • yahoo messenger 9.0.0.1389 • yahoo messenger 9.0.0.1912 • yahoo messenger 9.0.0.2018 … and 22 more