Yahoo! Messenger YInsthelper.DLL Multiple Buffer Overflow Vulnerabilities
BID:10199
Info
Yahoo! Messenger YInsthelper.DLL Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 10199 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 23 2004 12:00AM |
| Updated: | Apr 23 2004 12:00AM |
| Credit: | Discovery of these vulnerabilities has been credited to Rafel Ivgi. |
| Vulnerable: |
Yahoo! Messenger 5.6 .0.1358 Yahoo! Messenger 5.6 .0.1356 Yahoo! Messenger 5.6 .0.1355 Yahoo! Messenger 5.6 .0.1351 Yahoo! Messenger 5.6 .0.1347 Yahoo! Messenger 5.6 |
| Not Vulnerable: | |
Discussion
Yahoo! Messenger YInsthelper.DLL Multiple Buffer Overflow Vulnerabilities
Yahoo! Messenger COM objects YInstHelper.YInstStarter.1 and YInstHelper.YSearchSetting2 have been reported prone to remotely exploitable buffer overflow vulnerabilities.
The conditions are triggered when properties are assigned values (strings) of excessive length. By crafting a HTML page that invokes this COM object, and passing data to one of the affected properties, an attacker may overwrite values that are crucial to controlling program execution flow.
Immediate consequences of exploit attempts may result in the web browser instance, and all windows spawned from it, crashing when the malicious site is viewed. It is likely possible for attackers to execute instructions on affected client systems.
Yahoo! Messenger COM objects YInstHelper.YInstStarter.1 and YInstHelper.YSearchSetting2 have been reported prone to remotely exploitable buffer overflow vulnerabilities.
The conditions are triggered when properties are assigned values (strings) of excessive length. By crafting a HTML page that invokes this COM object, and passing data to one of the affected properties, an attacker may overwrite values that are crucial to controlling program execution flow.
Immediate consequences of exploit attempts may result in the web browser instance, and all windows spawned from it, crashing when the malicious site is viewed. It is likely possible for attackers to execute instructions on affected client systems.
Exploit / POC
Yahoo! Messenger YInsthelper.DLL Multiple Buffer Overflow Vulnerabilities
The following examples have been supplied:
The following examples have been supplied:
Solution / Fix
Yahoo! Messenger YInsthelper.DLL Multiple Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Yahoo! Messenger YInsthelper.DLL Multiple Buffer Overflow Vulnerabilities
References:
References:
- Yahoo! Messenger Homepage (Yahoo!)