Unrated severityNVD Advisory· Published Dec 15, 2006· Updated Jun 16, 2026
CVE-2006-6603
CVE-2006-6603
Description
Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to execute arbitrary code via a crafted HTML document. NOTE: some details were obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:yahoo:messenger:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:yahoo:messenger:*:*:*:*:*:*:*:*range: <=8.0
- cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:yahoo:messenger:5.6:*:*:*:*:*:*:*
- cpe:2.3:a:yahoo:messenger:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:yahoo:messenger:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:yahoo:messenger:7.5:*:*:*:*:*:*:*
- (no CPE)range: <2005.1.1.4
Patches
Vulnerability mechanics
References
6- messenger.yahoo.com/security_update.phpnvdPatchVendor Advisory
- secunia.com/advisories/23401nvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- www.kb.cert.org/vuls/id/901852nvdPatchUS Government Resource
- www.securityfocus.com/bid/21607nvdPatch
- www.vupen.com/english/advisories/2006/5016nvd
News mentions
0No linked articles in our index yet.