CVE-2007-4034 | BDVDB-2026-25528 Detail

Description#

Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id?1018470
http://secunia.com/advisories/26011
http://www.vupen.com/english/advisories/2007/2679
http://www.securityfocus.com/bid/25086
http://osvdb.org/37705
http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html
http://www.kb.cert.org/vuls/id/120760

Exploit#

No public exploit known

History#

Version 12007-07-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.