Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

Yahoo Messenger AudioConf ActiveX control buffer overflow

Added: 04/12/2007 CVE: CVE-2007-1680 BID: 23291 OSVDB: 34319 Background Yahoo! Messenger is an instant messaging application. It includes the AudioConf ActiveX control which is provided by yacscom.dll. Problem A buffer overflow vulnerability in the AudioConf ActiveX control allows command executi...

PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability

+========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

CVE-2007-1908

The CVE-2007-1908 entry describes a PHP file inclusion flaw in PHP121 Instant Messenger 2.2. An attacker can trigger arbitrary PHP code execution by passing a UNC share pathname or a local file pathname to the php121dir parameter, which is checked with file_exists. This is a remote-code-execution...

AOL instant messenger / ICQ directory traversal

Directory traversal on file receiption...

PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability ===============================================================...

PHP121 Instant Messenger 2.2 - Local File Inclusion

+========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

PHP121 Instant Messenger 2.2 - Local File Inclusion

PHP121 Instant Messenger 2.2 - Local File Inclusion +========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

CVE-2007-1680

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

Stack overflow

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

CVE-2007-1680

CVE-2007-1680 is a stack-based buffer overflow in Yahoo! Messenger’s AudioConf ActiveX control (yacscom.dll). The vulnerability occurs when the createAndJoinConference method is called with excessively long socksHostname or hostname parameters, enabling remote code execution under the current use...

CVE-2007-1680

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control yacscom.dll in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long 1 socksHostname and 2 hostname properties...

Yahoo! Messenger ActiveX buffer overflow

Buffer overflow in Yahoo.AudioConf control...

ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow

ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-07-012.html April 3, 2007 -- CVE ID: CVE-2007-1680 -- Affected Vendor: Yahoo! -- Affected Products: Yahoo! Messenger 8.x -- TippingPointTM IPS Customer Protection: TippingPoint I...

Yahoo! Messenger AudioConf ActiveX Control (yacscom.dll) Multiple Property Overflow

The remote host contains a version of the 'AudioConf' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host has a buffer overflow triggered by calling the control's 'createAndJoinConference' method with large values for the 'socksHostname' and...

2bgal-rfi.txt

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= 2BGal 3.1.1 Code: require$langfilename; =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= ExploiT: wWw.site.cOm/path/admin/index.php?langfilename= BorN-SHell wWw.site.cOm/path/admin/backupdb.inc.php?langfilename= BorN-SHell...

2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= 2BGal 3.1.1 = admin/index.php Remote File Include Vulnerability Script: 2BGal Version: 3.1.1 Download: http://www.ben3w.com/multimedia/2bgal.zip Discover: BorN To K!LL =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Bug in:...

Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Yahoo Messenger. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the ActiveX control Yahoo.AudioConf: DLL:...