PT-2007-3050 · Yahoo · Yahoo! Messenger

Peter Vreugdenhil · Published 2007-04-06 · Updated 2018-10-16 · CVE-2007-1680

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Yahoo! Messenger versions prior to 20070313

Description: The issue is related to a stack-based buffer overflow in the createAndJoinConference function within the AudioConf ActiveX control (yacscom.dll). This can be exploited by remote attackers to execute arbitrary code by providing long values for the socksHostname and hostname properties.

Recommendations: For versions prior to 20070313, update to a version released after 20070313 to resolve the issue. As a temporary workaround, consider restricting access to the createAndJoinConference function in the AudioConf ActiveX control until a patch is applied. Avoid using long values for the socksHostname and hostname properties in the affected ActiveX control to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-1680

Affected Products

Yahoo! Messenger

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2007-1680 · Security Note
• http://messenger.yahoo.com/security_update.php?id=031207 · Patch
• http://secunia.com/advisories/24742 · Vendor Advisory
• http://securityfocus.com/bid/23291 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-07-012.html · Vendor Advisory
• http://securitytracker.com/id?1017867 · Note
• http://securityfocus.com/archive/1/464607/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33408 · Note
• http://securityreason.com/securityalert/2523 · Note
• http://kb.cert.org/vuls/id/388377 · Note
• http://osvdb.org/34319 · Note
• http://vupen.com/english/advisories/2007/1219 · Note