PT-2008-2250 · Mediagrid+1 · Mediagrid Activex Control+1

E.B · Published 2008-02-06 · Updated 2017-09-29 · CVE-2008-0625

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yahoo! Music Jukebox version 2.2.2.56

Description The issue is related to a buffer overflow in the MediaGrid ActiveX control, specifically in the medagrid.dll component. This occurs when a long argument is passed to the AddBitmap method, allowing remote attackers to execute arbitrary code.

Recommendations For Yahoo! Music Jukebox version 2.2.2.56, consider disabling the AddBitmap method in the MediaGrid ActiveX control as a temporary workaround until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0625

Affected Products

Mediagrid Activex Control

Yahoo! Music Jukebox

References · 7

• 🔥 http://securityfocus.com/bid/27578 · Exploit
• 🔥 https://exploit-db.com/exploits/5052 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0625 · Security Note
• http://vupen.com/english/advisories/2008/0396/references · Note
• http://secunia.com/advisories/28757 · Note
• http://kb.cert.org/vuls/id/340860 · Note
• http://securitytracker.com/id?1019298 · Note