GCVE-110-CERTCC-2002-172315

Advisory Published

Vulnetix · Advisory published May 27, 2002

Yahoo! Messenger is an instant messaging client. When installed, Yahoo! Messenger enables a URI handler (ymsgr :parameter). The addview function of this handler can be used to execute arbitrary script/html on the local system.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population15exploitation0widely_known20score_current23.73046875ease_of_exploitation15

Aliases

CVE-2002-0032

References

Yahoo! Messenger "addview" function allows for the automatic execution of malicious script contained in web pages

advisory

Yahoo! Messenger "addview" function allows for the automatic execution of malicious script contained in web pages

url

Yahoo! Messenger "addview" function allows for the automatic execution of malicious script contained in web pages

url

Yahoo! Messenger "addview" function allows for the automatic execution of malicious script contained in web pages

advisory

Browse GCVE Records

71,925 records in the GCVE database · Updated July 13, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON