NetSight
IP …
critical9.3Public exploit code

CVE-2007-3147

Buffer overflow in the Yahoo!

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.

Affected products

VendorProductAffected versions
YahooMessenger
Versions 2.0.1.4, 8.0, 8.0.0.863, 8.0.1, 8.0_2005.1.1.4, 8.1.0.249

Weakness classification

CWE-119

References