VulnerabilityModified
CVE-2007-3147
Buffer overflow in the Yahoo!
HIGH 9.3EPSS 40.4%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 40.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 40.37% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- yahoo/messenger
- Source
- cve@mitre.org
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063817.htmlExploit
- http://messenger.yahoo.com/security_update.php?id=060707Patch
- http://research.eeye.com/html/advisories/published/AD20070608.htmlVendor Advisory
- http://research.eeye.com/html/advisories/upcoming/20070605.htmlVendor Advisory
- http://secunia.com/advisories/25547Patch, Vendor Advisory
- http://securityreason.com/securityalert/2809
- http://securitytracker.com/id?1018204
- http://www.kb.cert.org/vuls/id/949817US Government Resource
- http://www.securityfocus.com/archive/1/470861/100/0/threaded
- http://www.securityfocus.com/bid/24341
- http://www.securityfocus.com/bid/24354Exploit
- http://www.securitytracker.com/id?1018203
- http://www.vupen.com/english/advisories/2007/2094
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34758
- https://www.exploit-db.com/exploits/4042
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063817.htmlExploit
- http://messenger.yahoo.com/security_update.php?id=060707Patch
- http://research.eeye.com/html/advisories/published/AD20070608.htmlVendor Advisory
- http://research.eeye.com/html/advisories/upcoming/20070605.htmlVendor Advisory
- http://secunia.com/advisories/25547Patch, Vendor Advisory
- http://securityreason.com/securityalert/2809
- http://securitytracker.com/id?1018204
- http://www.kb.cert.org/vuls/id/949817US Government Resource
- http://www.securityfocus.com/archive/1/470861/100/0/threaded
- http://www.securityfocus.com/bid/24341
- http://www.securityfocus.com/bid/24354Exploit
- http://www.securitytracker.com/id?1018203
- http://www.vupen.com/english/advisories/2007/2094
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34758
- https://www.exploit-db.com/exploits/4042
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.