CVE-2007-3148 Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to t...
HighCVSS 9.3
EPSS 12.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo messenger | = 2.0.1.4 | No fix listed |
| yahoo messenger | = 8.0 | No fix listed |
| yahoo messenger | = 8.0.0.863 | No fix listed |
| yahoo messenger | = 8.0.1 | No fix listed |
| yahoo messenger | = 8.0_2005.1.1.4 | No fix listed |
| yahoo messenger | = 8.1.0.249 | No fix listed |
References
- 20070607 2nd Yahoo 0day ActiveX Exploit exploit mailing-list
- messenger.yahoo.com patch
- 37081 vdb-entry
- research.eeye.com vendor-advisory
- research.eeye.com vendor-advisory
- 25547 patch third-party-advisory vendor-advisory
- 1018204 exploit vdb-entry
- VU#932217 patch third-party-advisory us-government-resource
- 20070608 EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows mailing-list
- 24341 vdb-entry
- 24355 exploit vdb-entry
- 1018203 vdb-entry
- ADV-2007-2094 vdb-entry
- yahoo-webcam-viewer-bo(34759) vdb-entry
- 4043 exploit