Unscored severity · published Feb 6, 2008
CVE-2008-0623
Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long…
–
CVSS
9.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.2% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MJ
Music Jukebox · Yahoo
2.2.2.056 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0623
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0623
secunia.com
http://secunia.com/advisories/28757
US Government Resource
http://www.kb.cert.org/vuls/id/101676
Exploit
http://www.securityfocus.com/bid/27590
www.securitytracker.com
http://www.securitytracker.com/id?1019301
www.vupen.com
http://www.vupen.com/english/advisories/2008/0396/references
www.exploit-db.com
https://www.exploit-db.com/exploits/5043
More from Music Jukebox
–
CVE-2008-0624
Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the…
–
CVE-2008-0625
Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the…