CVE-2007-4515 Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via...
HighCVSS 9.3
EPSS 33.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo messenger | <= 8.1.0.413 | No fix listed |
References
- 20070830 Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities patch third-party-advisory vendor-advisory
- messenger.yahoo.com patch
- 37739 vdb-entry
- 26579 patch third-party-advisory vendor-advisory
- 3083 third-party-advisory
- 1018628 vdb-entry
- 25494 vdb-entry
- ADV-2007-3011 vdb-entry
- yahoo-messenger-yverinfo-bo(36363) vdb-entry