CVE-2002-2361: Yahoo Messenger

Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.

Affected products

• Yahoo Messenger: version 4.0 only; version 5.0 only; version 5.5 only

Published 2002-12-31. Last modified 2026-06-16.