PT-2007-3050 · Yahoo · Yahoo! Messenger

Peter Vreugdenhil · Publicado 2007-04-06 · Atualizado 2018-10-16 · CVE-2007-1680

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Yahoo! Messenger versions prior to 20070313

Description: The issue is related to a stack-based buffer overflow in the createAndJoinConference function within the AudioConf ActiveX control (yacscom.dll). This can be exploited by remote attackers to execute arbitrary code by providing long values for the socksHostname and hostname properties.

Recommendations: For versions prior to 20070313, update to a version released after 20070313 to resolve the issue. As a temporary workaround, consider restricting access to the createAndJoinConference function in the AudioConf ActiveX control until a patch is applied. Avoid using long values for the socksHostname and hostname properties in the affected ActiveX control to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-1680

Produtos afetados

Yahoo! Messenger

Referências · 12

• http://securitytracker.com/id?1017867 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1680 · Nota de Segurança
• http://messenger.yahoo.com/security_update.php?id=031207 · Correção
• http://securityfocus.com/archive/1/464607/100/0/threaded · Nota
• http://secunia.com/advisories/24742 · Aviso do Fabricante
• http://securityfocus.com/bid/23291 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-07-012.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33408 · Nota
• http://securityreason.com/securityalert/2523 · Nota
• http://kb.cert.org/vuls/id/388377 · Nota
• http://osvdb.org/34319 · Nota
• http://vupen.com/english/advisories/2007/1219 · Nota