PT-2008-2250 · Mediagrid+1 · Mediagrid Activex Control+1

E.B · Publicado 2008-02-06 · Atualizado 2017-09-29 · CVE-2008-0625

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Music Jukebox version 2.2.2.56

Description The issue is related to a buffer overflow in the MediaGrid ActiveX control, specifically in the medagrid.dll component. This occurs when a long argument is passed to the AddBitmap method, allowing remote attackers to execute arbitrary code.

Recommendations For Yahoo! Music Jukebox version 2.2.2.56, consider disabling the AddBitmap method in the MediaGrid ActiveX control as a temporary workaround until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0625

Produtos afetados

Mediagrid Activex Control

Yahoo! Music Jukebox

Referências · 7

• 🔥 http://securityfocus.com/bid/27578 · Exploit
• 🔥 https://exploit-db.com/exploits/5052 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0625 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0396/references · Nota
• http://secunia.com/advisories/28757 · Nota
• http://kb.cert.org/vuls/id/340860 · Nota
• http://securitytracker.com/id?1019298 · Nota