Yahoo! Music Jukebox 'mediagrid.dll' ActiveX Control Remote Buffer Overflow Vulnerability

Bugtraq ID:	27578
Class:	Boundary Condition Error
CVE:	CVE-2008-0625
Remote:	Yes
Local:	No
Published:	Feb 03 2008 12:00AM
Updated:	Nov 04 2008 07:55PM
Credit:	Elazar Broad discovered this vulnerability.
Vulnerable:	Yahoo! Music Jukebox 2.2
Not Vulnerable:	Yahoo! Music Jukebox 2.2.2.058

Yahoo! Music Jukebox 'mediagrid.dll' ActiveX Control Remote Buffer Overflow Vulnerability

Yahoo! Music Jukebox 'mediagrid.dll' ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

This issue affects 'mediagrid.dll' 2.2.2.56; other versions may also be vulnerable.

Yahoo! Music Jukebox 'mediagrid.dll' ActiveX Control Remote Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/27578.html

Yahoo! Music Jukebox 'mediagrid.dll' ActiveX Control Remote Buffer Overflow Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Yahoo! Music Jukebox 2.2

• Yahoo! ymjsetup.exe
  http://us.rd.yahoo.com/evt=34426/*http://us.rd.yahoo.com/evt=34426/*ht tp://us.dl1.yimg.com/download.yahoo.com/dl/music/ymj/us/ymjsetup.exe

Yahoo! Music Jukebox 'mediagrid.dll' ActiveX Control Remote Buffer Overflow Vulnerability

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Yahoo! Music Jukebox (Yahoo!)
  
• Vulnerability Note VU#340860 Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX contr (US-CERT)
  
• Yahoo! Music Jukebox Security Update (Yahoo!)