CVEvulnerability
CVE-2007-4515
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.
Affected configurations
• yahoo messenger (<= 8.1.0.413)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591 Patch, Vendor Advisory
- http://messenger.yahoo.com/security_update.php?id=082907 Patch
- http://osvdb.org/37739 osvdb.org
- http://secunia.com/advisories/26579 Patch, Vendor Advisory
- http://securityreason.com/securityalert/3083 securityreason.com
- http://securitytracker.com/id?1018628 securitytracker.com
- http://www.securityfocus.com/bid/25494 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3011 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36363 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591 Patch, Vendor Advisory
- http://messenger.yahoo.com/security_update.php?id=082907 Patch
- http://osvdb.org/37739 osvdb.org
- http://secunia.com/advisories/26579 Patch, Vendor Advisory
- http://securityreason.com/securityalert/3083 securityreason.com
- http://securitytracker.com/id?1018628 securitytracker.com
- http://www.securityfocus.com/bid/25494 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3011 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36363 exchange.xforce.ibmcloud.com