CVE-2007-5396

Format string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7…

published November 10, 2007

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Format string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle (who).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02473 · 84.3th percentile
Published
2007-11-10T00:00Z
EPSS history
Timeline
  • 10 NOV 00:00Z
    Format string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7…
    cvelistv5