CVE-2007-6535 Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method.
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo toolbar | All versions | No fix listed |
References
- 20071219 Yahoo Toolbar YShortcut.dll IsTaggedBM() Buffer Overflow mailing-list
- 26956 vdb-entry
- yahoo-yshortcut-bo(39155) vdb-entry