Vulnerabilities

TI-2017-01541 CVE-2017-2253 · GHSA-fq5g-2r8v-wmh7

Untrusted search path in Yahoo Japan Corporation Installer of Yahoo! Toolbar

LOW 36

Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan hors…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0108 Published 2017-07-14 No fix listed CWE-426

TI-2013-05631 CVE-2013-6853 · GHSA-xrr6-69ww-5ggj

Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for…

LOW 24

Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTM…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0193 Published 2014-01-26 No fix listed CWE-79

TI-2012-02287 CVE-2012-2647 · GHSA-jv6m-wr9m-f98f

Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to…

LOW 29

Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01276 Published 2012-07-31 No fix listed CWE-200

TI-2007-06232 CVE-2007-6535 · GHSA-wfx3-rpvh-cgjh

Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo!…

LOW 34

Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01891 Published 2007-12-27 No fix listed CWE-119

TI-2007-05943 CVE-2007-6228 · GHSA-r4w3-3p9j-2qrw

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in…