Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.
References
Link | Resource |
---|---|
http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html | Patch Vendor Advisory |
http://osvdb.org/37705 | |
http://secunia.com/advisories/26011 | Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/120760 | US Government Resource |
http://www.securityfocus.com/bid/25086 | Exploit Patch |
http://www.securitytracker.com/id?1018470 | |
http://www.vupen.com/english/advisories/2007/2679 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2007-07-27T22:00:00
Updated: 2007-08-22T09:00:00
Reserved: 2007-07-27T00:00:00
Link: CVE-2007-4034
JSON object: View
NVD Information
Status : Analyzed
Published: 2007-07-27T22:30:00.000
Modified: 2011-03-07T05:00:00.000
Link: CVE-2007-4034
JSON object: View
Redhat Information
No data.
CWE