CVE-2007-5396

MEDIUM · CVSS 6.8 EPSS 2.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-11-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-5396

Severity

MEDIUM

CVSS

6.8

EPSS

2.47%

Original Filing — NVD Description

Format string vulnerability in the ext_yahoo_contact_added function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle (who).