CVE-2008-0624 Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different...
MediumCVSS 4.3
EPSS 7.6%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo music jukebox | = 2.2.2.56 | No fix listed |
References
- 28757 third-party-advisory vendor-advisory
- VU#101676 third-party-advisory us-government-resource
- 27579 vdb-entry
- ADV-2008-0396 vdb-entry
- 5051 exploit