RETIRED: Yahoo! Messenger Multiple Unspecified Remote Code Execution Vulnerabilities
BID:24341
Info
RETIRED: Yahoo! Messenger Multiple Unspecified Remote Code Execution Vulnerabilities
| Bugtraq ID: | 24341 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 06 2007 12:00AM |
| Updated: | Jun 11 2007 07:50PM |
| Credit: | The original discoverer of this issue is currently unknown; eEye Digital Security disclosed these issues. |
| Vulnerable: |
Yahoo! Messenger 8.0.1 Yahoo! Messenger 8.1.0.29 |
| Not Vulnerable: | |
Discussion
RETIRED: Yahoo! Messenger Multiple Unspecified Remote Code Execution Vulnerabilities
Yahoo! Messenger is prone to multiple unspecified remote code-execution vulnerabilities.
No further details are currently available. We will update this BID as more information emerges.
Successfully exploiting these issues allows remote attackers to execute arbitrary machine code in the context of the affected application. This facilitates the remote compromise of affected computers.
Specific vulnerable versions of Yahoo! Messenger are not known, but versions in the 8 series for Microsoft Windows are reported affected.
UPDATE (June 7, 2007): The vendor announced that a fix is being developed to address this issue.
This BID has been replaced by the following writeups:
BID 24355 Yahoo! Messenger Webcam Viewer ActiveX Control Buffer Overflow Vulnerability
BID 24354 Yahoo! Messenger Webcam Upload ActiveX Control Buffer Overflow Vulnerability
Yahoo! Messenger is prone to multiple unspecified remote code-execution vulnerabilities.
No further details are currently available. We will update this BID as more information emerges.
Successfully exploiting these issues allows remote attackers to execute arbitrary machine code in the context of the affected application. This facilitates the remote compromise of affected computers.
Specific vulnerable versions of Yahoo! Messenger are not known, but versions in the 8 series for Microsoft Windows are reported affected.
UPDATE (June 7, 2007): The vendor announced that a fix is being developed to address this issue.
This BID has been replaced by the following writeups:
BID 24355 Yahoo! Messenger Webcam Viewer ActiveX Control Buffer Overflow Vulnerability
BID 24354 Yahoo! Messenger Webcam Upload ActiveX Control Buffer Overflow Vulnerability
Exploit / POC
RETIRED: Yahoo! Messenger Multiple Unspecified Remote Code Execution Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution / Fix
RETIRED: Yahoo! Messenger Multiple Unspecified Remote Code Execution Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
RETIRED: Yahoo! Messenger Multiple Unspecified Remote Code Execution Vulnerabilities
References:
References:
- Critical Bugs Discovered In Yahoo Messenger (InformationWeek)
- Yahoo! Messenger Homepage (Yahoo!)
- EEYEB-20070605 (eEye Digital Security)