Yahoo! Messenger File Extension Spoofing Vulnerability
BID:19353
Info
Yahoo! Messenger File Extension Spoofing Vulnerability
| Bugtraq ID: | 19353 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 04 2006 12:00AM |
| Updated: | Aug 04 2006 10:16PM |
| Credit: | [email protected] is credited with the discovery of this issue. |
| Vulnerable: |
Yahoo! Messenger 8.0.0.863 |
| Not Vulnerable: | |
Discussion
Yahoo! Messenger File Extension Spoofing Vulnerability
A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error.
An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users. This issue may lead to a compromise of the target computer as well as other consequences.
Yahoo! Messenger version 8.0.0.863 is reportedly affected; earlier versions may be affected as well.
A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error.
An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users. This issue may lead to a compromise of the target computer as well as other consequences.
Yahoo! Messenger version 8.0.0.863 is reportedly affected; earlier versions may be affected as well.
Exploit / POC
Yahoo! Messenger File Extension Spoofing Vulnerability
Attackers may exploit this issue using Yahoo! Messenger and a malicious executable file.
Sample filenames and extensions have been provided:
example: Annakournikova and her friends.jpg~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected] Trojan.txt~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected] Info.txt~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected]
Attackers may exploit this issue using Yahoo! Messenger and a malicious executable file.
Sample filenames and extensions have been provided:
example: Annakournikova and her friends.jpg~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected] Trojan.txt~@~@~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected] Info.txt~@~@~@~@~@~@~@~@~@~@~@~@~@[email protected]
Solution / Fix
Yahoo! Messenger File Extension Spoofing Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
Yahoo! Messenger File Extension Spoofing Vulnerability
References:
References:
- Yahoo! Messenger Homepage (Yahoo!)