Yahoo! Webcam ActiveX Control - Buffer Overrun Vulnerability

ID EDB-ID:23152
Type exploitdb
Reporter cesaro
Modified 2003-09-16T00:00:00


Yahoo! Webcam ActiveX Control 2.0 .0.107 Buffer Overrun Vulnerability. Remote exploit for windows platform


A buffer overrun has been discovered in the Yahoo! Webcam ActiveX control. The problem occurs due to insufficient bounds checking when handling user-supplied Webcam parameters. As a result, an attacker may be capable of hosting a malicious website designed to exploit this issue to execute arbitrary code, within the context of a victim users web browser. 

<object id="yahoowebcam"
classid="CLSID:E504EE6E-47C6-11D5-B8AB-00D0B78F3D48" >