CVE-2007-4034 Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remot...
HighCVSS 9.3
EPSS 13.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo widgets | <= 4.0.5 | No fix listed |
References
- help.yahoo.com patch vendor-advisory
- 37705 vdb-entry
- 26011 patch third-party-advisory vendor-advisory
- VU#120760 third-party-advisory us-government-resource
- 25086 exploit patch vdb-entry
- 1018470 vdb-entry
- ADV-2007-2679 vdb-entry