Yahoo! Webcam ActiveX Control Buffer Overrun Vulnerability

Bugtraq ID:	8634
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 16 2003 12:00AM
Updated:	Sep 16 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to Cesar <[email protected]>.
Vulnerable:	Yahoo! Webcam ActiveX Control 2.0 .0.107 + Yahoo! Instant Messenger 3.5 + Yahoo! Instant Messenger build 734 + Yahoo! Instant Messenger build 733 + Yahoo! Messenger 5.5 + Yahoo! Messenger 5.0 .1232 + Yahoo! Messenger 5.0 .1065 + Yahoo! Messenger 5.0 .1046 + Yahoo! Messenger 5.0 + Yahoo! Messenger 4.0
Not Vulnerable:	Yahoo! Webcam ActiveX Control 2.0 .0.108 + Yahoo! Instant Messenger 3.5 + Yahoo! Instant Messenger build 734 + Yahoo! Instant Messenger build 733 + Yahoo! Messenger 5.5 + Yahoo! Messenger 5.0 .1232 + Yahoo! Messenger 5.0 .1065 + Yahoo! Messenger 5.0 .1046 + Yahoo! Messenger 5.0 + Yahoo! Messenger 4.0

Yahoo! Webcam ActiveX Control Buffer Overrun Vulnerability

Solution:
It has been reported that this issue has been addressed in the latest version of Yahoo! Webcam ActiveX Control. A download option for this latest control will be prompted to the user upon invoking their Yahoo! software.

Yahoo! Webcam ActiveX Control Buffer Overrun Vulnerability

References:

• Yahoo! Messenger Security Updates (Yahoo!)