CVE-2007-3147 Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to t...
HighCVSS 9.3
EPSS 40.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo messenger | = 2.0.1.4 | No fix listed |
| yahoo messenger | = 8.0 | No fix listed |
| yahoo messenger | = 8.0.0.863 | No fix listed |
| yahoo messenger | = 8.0.1 | No fix listed |
| yahoo messenger | = 8.0_2005.1.1.4 | No fix listed |
| yahoo messenger | = 8.1.0.249 | No fix listed |
References
- 20070606 Yahoo 0day ActiveX Webcam Exploit exploit mailing-list
- messenger.yahoo.com patch
- research.eeye.com vendor-advisory
- research.eeye.com vendor-advisory
- 25547 patch third-party-advisory vendor-advisory
- 2809 third-party-advisory
- 1018204 vdb-entry
- VU#949817 third-party-advisory us-government-resource
- 20070608 EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows mailing-list
- 24341 vdb-entry
- 24354 exploit vdb-entry
- 1018203 vdb-entry
- ADV-2007-2094 vdb-entry
- yahoo-webcam-upload-bo(34758) vdb-entry
- 4042 exploit