CVE-2012-0268

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo!

published January 19, 2012

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafted JPG image that triggers a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01658 · 76.3th percentile
Published
2012-01-19T15:00Z
EPSS history
Timeline
  • 19 JAN 15:00Z
    Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo!
    cvelistv5