MSN Messenger and Windows Live Messenger webcam stream heap overflow

Overview MSN Messenger fails to properly handle webcam streams, which may allow a remote attacker to execute arbitrary code. Description MSN Messenger is an instant messaging application. Starting with version 8, MSN Messenger was renamed to Windows Live Messenger. Windows Live Messenger and some...

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow

source: https://www.securityfocus.com/bid/25461/info Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context ...

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow source: https://www.securityfocus.com/bid/25461/info Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue...

Yahoo! Messenger < 8.1.0.416 Multiple Vulnerabilities

The version of Yahoo! Messenger installed on the remote host is reportedly affected by a buffer overflow as well as a denial of service vulnerability, both involving its video chat feature. If an attacker can trick a user on the affected host into accepting a webcam invitation, these issues could...

雅虎通ywcvwr.dll远程堆溢出漏洞

BUGTRAQ ID: 25330 雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理畸形功能请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 雅虎通中有个名为webcam的功能。当webcam请求初始化的时候雅虎通会生成一个类（webcamclass），webcamclass会在这个地方（ywcvwr.dll）申请一段内存，这段内存的长度是0x400： .text:10001737 cmp edi, esp+0Ch+arg0 .text:1000173B jl short loc10001735 .text:1000173D cmp edi, 1400000h...

CVE-2007-4391

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

Heap overflow

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

CVE-2007-4391

CVE-2007-4391 describes a heap-based buffer overflow in Kakadu kdu_v32m.dll used by Yahoo! Messenger 8.1.0.413 that can be triggered by a crafted JPEG2000 length field in a webcam invitation, potentially causing an application crash or remote code execution. Public disclosures link the issue to Y...

CVE-2007-4391

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

Yahoo! Messenger KDU_V32M.DLL远程拒绝服务漏洞

Yahoo! Messenger是一款流行的即时通信程序。 Yahoo! Messenger包含的kduv32m.dll库存在缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题是kduv32m.dll库对图片的长度宽度及tile的长度和宽度缺少正确处理，构建这些参数，使起new的参数为0，就可以导致应用程序崩溃，造成拒绝服务攻击。 Yahoo! Messenger 8.1 目前没有详细解决方案提供： http://messenger.yahoo.com/ 可参考如下测试程序： http://www.team509.com/expyahoo.rar...

Yahoo! Messenger webcam stream heap overflow

Overview Yahoo! Messenger fails to properly handle webcam streams, which may allow a remote attacker to execute arbitrary code. Description Yahoo! Messenger is an instant messaging application that is available for Windows, Mac, Unix, web, and mobile systems. Some version of Yahoo! Messenger, suc...

Yahoo! Messenger 8.1 - KDU_V32M.DLL Remote Denial of Service

Yahoo! Messenger 8.1 - KDUV32M.DLL Remote Denial of Service source: https://www.securityfocus.com/bid/25330/info Yahoo! Messenger is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This...

Yahoo! Messenger 8.1 - 'KDU_V32M.DLL' Remote Denial of Service

source: https://www.securityfocus.com/bid/25330/info Yahoo! Messenger is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. This issue affects Yahoo! Messenger 8.1.0; other versions may also...

CVE-2007-3928

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638...

Buffer overflow

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638...

CVE-2007-3928

Yahoo! Messenger 8.1 is affected by CVE-2007-3928 due to a buffer overflow in address-book entries. An authenticated user can exploit a long e-mail address in an address book to execute arbitrary code on the victim’s system. The issue is described as a remote code execution vector with user inter...

CVE-2007-3928

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638...

Yahoo Messenger buffer overflow

Buffer overflow on oversized e-mail address in address buuok entry...

Buffer overflow

Buffer overflow in the AOL Instant Messenger AIM protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///1111111/ substring...

CVE-2007-3832

The CVE-2007-3832 issue affects Trillian before 3.1.7.0, where a buffer overflow in the AIM protocol URI handler (aim.dll) can be triggered by specially crafted aim:// URIs. An unauthenticated remote attacker could potentially execute arbitrary code with the user’s privileges by convincing a user...