CVE-2006-6603

Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information.

• http://messenger.yahoo.com/security_update.php?id=120806Patch, Vendor Advisory
• http://secunia.com/advisories/23401Patch, Vendor Advisory
• http://securitytracker.com/id?1017387Patch
• http://www.kb.cert.org/vuls/id/901852Patch, US Government Resource
• http://www.securityfocus.com/bid/21607Patch
• http://www.vupen.com/english/advisories/2006/5016
• http://messenger.yahoo.com/security_update.php?id=120806Patch, Vendor Advisory
• http://secunia.com/advisories/23401Patch, Vendor Advisory
• http://securitytracker.com/id?1017387Patch
• http://www.kb.cert.org/vuls/id/901852Patch, US Government Resource
• http://www.securityfocus.com/bid/21607Patch
• http://www.vupen.com/english/advisories/2006/5016

Published

Dec 15, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6597Argument injection vulnerability in HyperAccess 8.4 allows u…
• CVE-2006-6598Directory traversal vulnerability in viewnfo.php in (1) Torr…
• CVE-2006-6599maketorrent.php in TorrentFlux 2.2 allows remote authenticat…
• CVE-2006-6600Cross-site scripting (XSS) vulnerability in dir.php in Torre…
• CVE-2006-6601Windows Media Player 10.00.00.4036 in Microsoft Windows XP S…
• CVE-2006-6602explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft…
• CVE-2006-6604Directory traversal vulnerability in downloaddetails.php in …
• CVE-2006-6605Stack-based buffer overflow in the POP service in MailEnable…
• CVE-2006-6606Multiple SQL injection vulnerabilities in Clarens jclarens b…
• CVE-2006-6607The Java Key Store (JKS) for WebSphere Application Server (W…
• CVE-2006-6608Unspecified vulnerability in SSH key based authentication in…
• CVE-2006-6609Nexuiz before 2.2.1 allows remote attackers to cause a denia…