Strix
26.1K

CVE-2012-0268

UnknownEPSS 1.73%

Last modified

CVE-2012-0268 is a vulnerability of currently unknown severity. Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.. EPSS estimates a 1.73% chance of exploitation in the next 30 days.

Description

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.

Metrics

EPSS Probability
1.73%

74.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
YahooMessenger<= 11.5.0.152—
YahooMessenger0.99.17-1—
YahooMessenger1.0—
YahooMessenger1.0.4—
YahooMessenger1.0.6—
YahooMessenger2.0.1.4—
YahooMessenger3.0—
YahooMessenger3.0.1—
YahooMessenger3.5—
YahooMessenger4.0—
YahooMessenger4.1—
YahooMessenger5.0—
YahooMessenger5.0.1046—
YahooMessenger5.0.1065—
YahooMessenger5.0.1232—
YahooMessenger5.5—
YahooMessenger5.5.1249—
YahooMessenger5.6—
YahooMessenger5.6.0.1347—
YahooMessenger5.6.0.1351—
YahooMessenger5.6.0.1355—
YahooMessenger5.6.0.1356—
YahooMessenger5.6.0.1358—
YahooMessenger6.0—
YahooMessenger6.0.0.1643—
YahooMessenger6.0.0.1750—
YahooMessenger6.0.0.1921—
YahooMessenger6.1—
YahooMessenger7.0—
YahooMessenger7.0.0.426—
YahooMessenger7.0.0.437—
YahooMessenger7.0.438—
YahooMessenger7.5—
YahooMessenger7.5.0.814—
YahooMessenger8.0—
YahooMessenger8.0.0.505—
YahooMessenger8.0.0.508—
YahooMessenger8.0.0.701—
YahooMessenger8.0.0.716—
YahooMessenger8.0.0.863—
YahooMessenger8.0.1—
YahooMessenger8.0_2005.1.1.4—
YahooMessenger8.1—
YahooMessenger8.1.0.195—
YahooMessenger8.1.0.209—
YahooMessenger8.1.0.239—
YahooMessenger8.1.0.244—
YahooMessenger8.1.0.249—
YahooMessenger8.1.0.401—
YahooMessenger8.1.0.402—

Showing 50 of 82 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2012-0268?
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.
How severe is CVE-2012-0268?
Severity scoring for CVE-2012-0268 is pending analysis. The EPSS model estimates a 1.73% probability of exploitation in the next 30 days.
How do I fix CVE-2012-0268?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-0268?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST