CVSS: 9.8EPSS: 37%CPEs: 1EXPL: 5CVE-2008-0623 – Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (PoC)
https://notcve.org/view.php?id=CVE-2008-0623
06 Feb 2008 — Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method. Desbordamiento de búfer basado en pila en el control YMP Datagrid ActiveX (datagrid.dll) de Yahoo! Music Jukebox 2.2.2.056. Permite a atacantes remotosd ejecutar código de su elección a través de argumentos largos al método AddImage method. • https://www.exploit-db.com/exploits/5043 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 11%CPEs: 1EXPL: 4CVE-2008-0624 – Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (PoC)
https://notcve.org/view.php?id=CVE-2008-0624
06 Feb 2008 — Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623. Un desbordamiento de búfer en el control ActiveX YMP Datagrid (datagrid.dll) en Yahoo! JukeBox versión 2.2.2.56, permite a los atacantes remotos ejecutar código arbitrario por medio de un argumento largo para el método AddButton, una vulnerabilidad diferente de CVE-2008-0623. • https://www.exploit-db.com/exploits/5043 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 15%CPEs: 1EXPL: 2CVE-2008-0625 – Yahoo! JukeBox MediaGrid - 'AddBitmap()' ActiveX Buffer Overflow
https://notcve.org/view.php?id=CVE-2008-0625
06 Feb 2008 — Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method. Desbordamiento de búfer en el control ActiveX MediaGrid (mediagrid.dll) de Yahoo! Music Jukebox 2.2.2.56. Permite a atacantes remotos ejecutar código de su elección a través de argumentos largos al método AddBitmap. • https://www.exploit-db.com/exploits/5052 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2007-6535
https://notcve.org/view.php?id=CVE-2007-6535
27 Dec 2007 — Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method. Desbordamiento de buffer en el control ActiveX YShortcut ( YShortcut.dll 2006.8.15.1 ) de Yahoo! Toolbar. Podría permitir que atacantes ejecuten código arbitrario a través de una cadena larga de texto en el método IsTaggedBM. • http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059204.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2CVE-2007-6228 – Yahoo! Toolbar 1.4.1 Helper - Class ActiveX Control Remote Buffer Overflow (Denial of Service) (PoC)
https://notcve.org/view.php?id=CVE-2007-6228
04 Dec 2007 — Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service (browser crash) via a long argument to the c method. Desbordamiento de búfer basado en pila en la clase Helper en el controlado ActiveX yt.ythelper.2 en Yahoo! Toolbar 1.4.1 permite a atacantes remotos provocar denegación de servicio (caida de navegador) a través de un argumento largo en el método c. • https://www.exploit-db.com/exploits/30832 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 5%CPEs: 1EXPL: 2CVE-2007-5017 – Yahoo! Messenger 8.1.0.421 - CYFT Object Arbitrary File Download
https://notcve.org/view.php?id=CVE-2007-5017
20 Sep 2007 — Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method. Vulnerabilidad de escalado de rutas absolutas en ciertos controles de ActiveX en el objeto CYFT del ft60.dll del Yahoo! Messenger 8.1.0.421 permite a atacantes remotos forzar una descarga y crear o sobrescribir ficheros de su elecció... • https://www.exploit-db.com/exploits/4428 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.1EPSS: 3%CPEs: 2EXPL: 2CVE-2007-4635 – Yahoo! Messenger 8.1 - File Transfer Denial of Service
https://notcve.org/view.php?id=CVE-2007-4635
31 Aug 2007 — Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe. NOTE: this might be related to CVE-2007-4515. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Yahoo! • https://www.exploit-db.com/exploits/30544 • CWE-20: Improper Input Validation CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 59%CPEs: 1EXPL: 2CVE-2007-4515 – Yahoo! Messenger - 'YVerInfo.dll' ActiveX Control Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-4515
31 Aug 2007 — Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information. Un desbordamiento de búfer en cierto control ActiveX en YVerInfo.dll versiones anteriores a 2007.8.27.1 en la conjunto de servicios para Yahoo! • https://www.exploit-db.com/exploits/16522 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 17%CPEs: 1EXPL: 2CVE-2007-4391 – Yahoo! Messenger 8.1 - 'KDU_V32M.DLL' Remote Denial of Service
https://notcve.org/view.php?id=CVE-2007-4391
17 Aug 2007 — Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted. Desbordamiento de búfer basado en pila en Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 permite a atacantes remotos provocar denegació... • https://www.exploit-db.com/exploits/30500 • CWE-20: Improper Input Validation CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 30%CPEs: 1EXPL: 2CVE-2007-4034 – Yahoo! Widget < 4.0.5 - 'GetComponentVersion()' Remote Overflow
https://notcve.org/view.php?id=CVE-2007-4034
27 Jul 2007 — Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information. Un desbordamiento de búfer en la región stack de la memoria en el Control ActiveX YDPCTL.YDPControl.1 (también se conoce como Yahoo! • https://www.exploit-db.com/exploits/4250 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •