CVE-2007-1680
Published Apr 6, 2007
Last updated 6 years ago
Overview
- Description
- Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:yahoo:messenger:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7178A56-42F9-44BC-8742-402480F761FA"
},
{
"criteria": "cpe:2.3:a:yahoo:messenger:8.0.0.863:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D369102-AC28-45D1-A9E7-B6C4F34529C1"
},
{
"criteria": "cpe:2.3:a:yahoo:messenger:8.0_2005.1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B4212E3-8338-430F-A9BC-A28D502B8B81"
},
{
"criteria": "cpe:2.3:a:yahoo:messenger:8.1.0.209:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A9243F4-ADE8-4B7A-A195-EEAD41FF14EA"
},
{
"criteria": "cpe:2.3:a:yahoo:messenger:8.1.0.239:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CAF169E-8466-43EF-A03D-D49256EB2C18"
}
],
"operator": "OR"
}
]
}
]