CVE-2005-1618: Yahoo Messenger

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and an & (ampersand), which causes Messenger to send a corrupted packet to the server, which triggers a disconnect from the server.

Affected products

• Yahoo Messenger: version 5.5 only; version 5.6 only; version 6.0 only

Published 2005-05-16. Last modified 2026-06-16.