Get Demo
Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another users buddy list and possibly obtain sensitive information.