critical9.3Public exploit code
CVE-2008-2111
The ActiveX Control (yNotifier.dll) in Yahoo!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yahoo! Assistant 3.6 - 'yNotifier.dll' ActiveX Control Memory Corruption2008-05-06 · dos · windows · Verified
Impact
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yahoo | Yahoo Assistant | through 3.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30115
- http://secway.org/advisory/AD20080506EN.txt
- http://www.securityfocus.com/bid/29065
- http://www.securitytracker.com/id?1020004
- http://www.vupen.com/english/advisories/2008/1471/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42233
- http://secunia.com/advisories/30115
- http://secway.org/advisory/AD20080506EN.txt
- http://www.securityfocus.com/bid/29065
- http://www.securitytracker.com/id?1020004
- http://www.vupen.com/english/advisories/2008/1471/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42233