CVE-2006-3298: Yahoo Messenger

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, which triggers the crash in jscript.dll.

Affected products

• Yahoo Messenger: version 7.0.438 only; version 7.5.0.814 only

Published 2006-06-29. Last modified 2026-06-16.