CVE-2002-1664: Yahoo Messenger

Medium severity, CVSS 6.4. EPSS: 3.2% chance of exploitation in the next 30 days.

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.

Affected products

• Yahoo Messenger: version 5.0 only

Published 2002-12-31. Last modified 2026-06-16.