CVE-2008-2111 The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corrupt...
HighCVSS 9.3
EPSS 5.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo assistant | <= 3.6 | No fix listed |
References
- 30115 third-party-advisory
- secway.org
- 29065 vdb-entry
- 1020004 vdb-entry
- ADV-2008-1471 vdb-entry
- yahoo-assistant-ynotifier-code-execution(42233) vdb-entry