CVEvulnerability
CVE-2008-2111
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Affected configurations
• yahoo yahoo assistant (<= 3.6)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/30115 secunia.com
- http://secway.org/advisory/AD20080506EN.txt secway.org
- http://www.securityfocus.com/bid/29065 www.securityfocus.com
- http://www.securitytracker.com/id?1020004 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1471/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42233 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/30115 secunia.com
- http://secway.org/advisory/AD20080506EN.txt secway.org
- http://www.securityfocus.com/bid/29065 www.securityfocus.com
- http://www.securitytracker.com/id?1020004 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1471/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42233 exchange.xforce.ibmcloud.com