CVE-2007-1680

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties.

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-07-012.html	Patch Vendor Advisory
http://messenger.yahoo.com/security_update.php?id=031207	Patch
http://www.securityfocus.com/bid/23291	Patch Vendor Advisory
http://secunia.com/advisories/24742	Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/388377	US Government Resource
http://www.securitytracker.com/id?1017867
http://securityreason.com/securityalert/2523
http://osvdb.org/34319
http://www.vupen.com/english/advisories/2007/1219
https://exchange.xforce.ibmcloud.com/vulnerabilities/33408
http://www.securityfocus.com/archive/1/464607/100/0/threaded

Configuration 1

cpe:2.3:a:yahoo:messenger:8.1.0.239:*:*:*:*:*:*:* cpe:2.3:a:yahoo:messenger:8.0:*:*:*:*:*:*:* cpe:2.3:a:yahoo:messenger:8.0_2005.1.1.4:*:*:*:*:*:*:* cpe:2.3:a:yahoo:messenger:8.1.0.209:*:*:*:*:*:*:* cpe:2.3:a:yahoo:messenger:8.0.0.863:*:*:*:*:*:*:*

---

Published : 2007-04-06 01:19

Updated : 2018-10-16 04:40

---

NVD link : CVE-2007-1680

Mitre link : CVE-2007-1680

No products.

NVD-CWE-Other