{"api_version":"1","generated_at":"2026-07-24T21:28:05+00:00","cve":"CVE-2007-4515","urls":{"html":"https://cve.report/CVE-2007-4515","api":"https://cve.report/api/cve/CVE-2007-4515.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-4515","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-4515"},"summary":{"title":"CVE-2007-4515","description":"Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.  NOTE: some of these details are obtained from third party information.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-08-31 22:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://securitytracker.com/id?1018628","name":"http://securitytracker.com/id?1018628","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Yahoo! Messenger Buffer Overflow in ActiveX Control Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26579","name":"http://secunia.com/advisories/26579","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflows - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25494","name":"http://www.securityfocus.com/bid/25494","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Yahoo! Messenger YVerInfo.DLL ActiveX Control Multiple Buffer Overflow Weaknesses","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/3083","name":"http://securityreason.com/securityalert/3083","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/37739","name":"http://osvdb.org/37739","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36363","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36363","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3011","name":"http://www.vupen.com/english/advisories/2007/3011","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://messenger.yahoo.com/security_update.php?id=082907","name":"http://messenger.yahoo.com/security_update.php?id=082907","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Security Update - Yahoo! Messenger","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591","name":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4515","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4515","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"4515","vulnerable":"1","versionEndIncluding":"8.1.0.413","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"yahoo","cpe5":"messenger","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:01:09.859Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"37739","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/37739"},{"name":"26579","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26579"},{"name":"yahoo-messenger-yverinfo-bo(36363)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36363"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://messenger.yahoo.com/security_update.php?id=082907"},{"name":"20070830 Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591"},{"name":"3083","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3083"},{"name":"1018628","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1018628"},{"name":"25494","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25494"},{"name":"ADV-2007-3011","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3011"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-08-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.  NOTE: some of these details are obtained from third party information."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"37739","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/37739"},{"name":"26579","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26579"},{"name":"yahoo-messenger-yverinfo-bo(36363)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36363"},{"tags":["x_refsource_CONFIRM"],"url":"http://messenger.yahoo.com/security_update.php?id=082907"},{"name":"20070830 Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591"},{"name":"3083","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3083"},{"name":"1018628","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1018628"},{"name":"25494","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25494"},{"name":"ADV-2007-3011","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3011"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-4515","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.  NOTE: some of these details are obtained from third party information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"37739","refsource":"OSVDB","url":"http://osvdb.org/37739"},{"name":"26579","refsource":"SECUNIA","url":"http://secunia.com/advisories/26579"},{"name":"yahoo-messenger-yverinfo-bo(36363)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36363"},{"name":"http://messenger.yahoo.com/security_update.php?id=082907","refsource":"CONFIRM","url":"http://messenger.yahoo.com/security_update.php?id=082907"},{"name":"20070830 Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities","refsource":"IDEFENSE","url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591"},{"name":"3083","refsource":"SREASON","url":"http://securityreason.com/securityalert/3083"},{"name":"1018628","refsource":"SECTRACK","url":"http://securitytracker.com/id?1018628"},{"name":"25494","refsource":"BID","url":"http://www.securityfocus.com/bid/25494"},{"name":"ADV-2007-3011","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3011"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-4515","datePublished":"2007-08-31T22:00:00.000Z","dateReserved":"2007-08-23T00:00:00.000Z","dateUpdated":"2024-08-07T15:01:09.859Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-08-31 22:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.0.413","matchCriteriaId":"28CF8D81-8299-4EC7-B3A6-E08B57786CB8"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"4515","Ordinal":"1","Title":"CVE-2007-4515","CVE":"CVE-2007-4515","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"4515","Ordinal":"1","NoteData":"Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.  NOTE: some of these details are obtained from third party information.","Type":"Description","Title":"CVE-2007-4515"},{"CveYear":"2007","CveId":"4515","Ordinal":"2","NoteData":"2007-08-31","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"4515","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}