Unscored severity · published Aug 31, 2007
CVE-2007-4515
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to…
–
CVSS
33%
EPSS
No
On KEV
Description
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)33.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Messenger · Yahoo
through 8.1.0.413 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4515
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4515
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591
Patch
http://messenger.yahoo.com/security_update.php?id=082907
osvdb.org
http://osvdb.org/37739
Patch
http://secunia.com/advisories/26579
securityreason.com
http://securityreason.com/securityalert/3083
securitytracker.com
http://securitytracker.com/id?1018628
More from Messenger
–
CVE-2014-7216
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…
–
CVE-2012-0268
Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute…
–
CVE-2009-4171
An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer…
–
CVE-2007-5017
Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and…
–
CVE-2007-4635
Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer…