Unscored severity · published May 7, 2008
CVE-2008-2111
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that…
–
CVSS
5.4%
EPSS
No
On KEV
Description
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.4% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
YA
Yahoo Assistant · Yahoo
through 3.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2111
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2111
secunia.com
http://secunia.com/advisories/30115
secway.org
http://secway.org/advisory/AD20080506EN.txt
www.securityfocus.com
http://www.securityfocus.com/bid/29065
www.securitytracker.com
http://www.securitytracker.com/id?1020004
www.vupen.com
http://www.vupen.com/english/advisories/2008/1471/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42233