Back to search
CVE-2007-4515
Published: Aug 31, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
37739
vdb-entry
x_refsource_OSVDB
26579
third-party-advisory
x_refsource_SECUNIA
yahoo-messenger-yverinfo-bo(36363)
vdb-entry
x_refsource_XF
http://messenger.yahoo.com/security_update.php?id=082907
x_refsource_CONFIRM
20070830 Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities
third-party-advisory
x_refsource_IDEFENSE
3083
third-party-advisory
x_refsource_SREASON
1018628
vdb-entry
x_refsource_SECTRACK
25494
vdb-entry
x_refsource_BID
ADV-2007-3011
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now