Published: 27/07/2007 Updated: 07/03/2011

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control prior to 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets prior to 4.0.5 allows remote malicious users to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yahoo widgets

<html>  <html> <object classid="CLSID:7EC7B6C5-25BD-4586-A641-D2ACBB6629DD" id="target"></OBJECT> <SCRIPT language="javascript"> var heapSprayToAddress = 0x05050505; var payLoadCode = unescape("%uc931%ue983%ud9b0%ud9ee%u24 ...

CWE-119 http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html http://www.securityfocus.com/bid/25086 http://secunia.com/advisories/26011 http://www.kb.cert.org/vuls/id/120760 http://www.securitytracker.com/id?1018470 http://osvdb.org/37705 http://www.vupen.com/english/advisories/2007/2679 https://nvd.nist.gov https://www.exploit-db.com/exploits/4250/https://www.kb.cert.org/vuls/id/120760

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-4034

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect