Yahoo Instant Messenger versions 5.6.0.1351 and below are susceptible to a buffer overflow when an attacker sends a specially crafted long filename to a user and that user attempts to download the file.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32487/yahooIM.txt
Source: https://packetstormsecurity.com/files/32487/yahooIM.txt.html