CVEvulnerability
CVE-2007-4034
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.
Affected configurations
• yahoo widgets (<= 4.0.5)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html Patch, Vendor Advisory
- http://osvdb.org/37705 osvdb.org
- http://secunia.com/advisories/26011 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/120760 US Government Resource
- http://www.securityfocus.com/bid/25086 Exploit, Patch
- http://www.securitytracker.com/id?1018470 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2679 www.vupen.com
- http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html Patch, Vendor Advisory
- http://osvdb.org/37705 osvdb.org
- http://secunia.com/advisories/26011 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/120760 US Government Resource
- http://www.securityfocus.com/bid/25086 Exploit, Patch
- http://www.securitytracker.com/id?1018470 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2679 www.vupen.com