CVE-2006-5563 Null dereference in n/a

What is CVE-2006-5563?

CVE-2006-5563 is a medium-severity vulnerability in n/a, published on 27 Oct 2006. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Which versions are affected by CVE-2006-5563?

It affects 1 product.

Products include Yahoo Messenger.

How do I fix CVE-2006-5563?

No fix has been published for CVE-2006-5563 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-5563 being exploited?

There is no known exploitation of CVE-2006-5563 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2014-7216 Memory corruption in n/a Critical 9.3
• CVE-2007-4515 Memory corruption in n/a Critical 9.3
• CVE-2007-4391 Memory corruption in n/a Critical 9.3
• CVE-2007-3147 Memory corruption in n/a Critical 9.3
• CVE-2007-3148 Memory corruption in n/a Critical 9.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8vmh-6cgm-cw63.