- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 28341
- Проверка EDB
-
- Пройдено
- Автор
- IVANCOOL2003
- Тип уязвимости
- DOS
- Платформа
- WINDOWS
- CVE
- N/A
- Дата публикации
- 2006-08-04
Код:
source: https://www.securityfocus.com/bid/19353/info
A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error.
An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users. This issue may lead to a compromise of the target computer as well as other consequences.
Yahoo! Messenger version 8.0.0.863 is reportedly affected; earlier versions may be affected as well.
Sample filenames and extensions have been provided:
example: Annakournikova and her friends.jpg~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected] Trojan.txt~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected] Info.txt~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected]- Источник
- www.exploit-db.com
