Published: 06/02/2008 Updated: 29/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 450

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote malicious users to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yahoo music jukebox 2.2.2.56

<!-- Yahoo! Music Jukebox 22 AddImage() ActiveX 0day Remote Buffer Overlow PoC Exploit Bug discovered by Krystian Kloskowski (h07) <h07@interiapl> Product homepage: musicyahoocom/jukebox/ Tested on: - Yahoo! Music Jukebox (222056) - MS IE 6 Details: ---------------------------------------------------------------- Except ...

<html> <object classid="clsid:5F810AFC-BB5F-4416-BE63-E01DD117BD6C" id="target"></OBJECT&g ...

<?php // 0x48k-ymj by // based on /5043 // Bug discovered by Krystian Kloskowski (h07) <h07@interiapl> function unescape($s){ $res=strtoupper(bin2hex($s)); $g = round(strlen($res)/4); if ($g != (strlen($res)/4))$res="00"; $out = ""; for ($i=0; $i<strlen($res);$i+=4)$out="%u"substr($res, $i+2, 2)substr($res, $i, ...

<html> < ...

CWE-119 http://www.kb.cert.org/vuls/id/101676 http://www.securityfocus.com/bid/27579 http://secunia.com/advisories/28757 http://www.vupen.com/english/advisories/2008/0396/references https://www.exploit-db.com/exploits/5051 https://nvd.nist.gov https://www.exploit-db.com/exploits/5043/https://www.kb.cert.org/vuls/id/101676

CVE-2008-0624

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect