雅虎通ywcvwr.dll远程堆溢出漏洞

BUGTRAQ ID: 25330 雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理畸形功能请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 雅虎通中有个名为webcam的功能。当webcam请求初始化的时候雅虎通会生成一个类（webcamclass），webcamclass会在这个地方（ywcvwr.dll）申请一段内存，这段内存的长度是0x400： .text:10001737 cmp edi, esp+0Ch+arg0 .text:1000173B jl short loc10001735 .text:1000173D cmp edi, 1400000h...

Yahoo! Messenger webcam stream heap overflow

Overview Yahoo! Messenger fails to properly handle webcam streams, which may allow a remote attacker to execute arbitrary code. Description Yahoo! Messenger is an instant messaging application that is available for Windows, Mac, Unix, web, and mobile systems. Some version of Yahoo! Messenger, suc...

Preemptive Protection against Yahoo! Messenger Webcam ActiveX Control Buffer Overflow Vulnerability

Multiple stack buffer overflow vulnerabilities have been reported in Yahoo! Messenger. Yahoo! Messenger is a popular instant messaging communicating application. By persuading a user to visit a specially crafted web page, a remote attacker could trigger these vulnerabilities to execute arbitrary...

Buffer overflow

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

Buffer overflow

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

CVE-2007-3148

A stack buffer overflow vulnerability exists in the Yahoo! Webcam Viewer ActiveX control (specifically within ywcvwr.dll 2.0.1.4 ) for Yahoo! Messenger 8.1.0.249 . The flaw is caused by boundary errors when processing a long server property value via the receive method . A remote attacker can exp...

Yahoo! Messenger Webcam ActiveX Multiple Overflows

Binary data 4079.prm...

Yahoo! Messenger WebCam ActiveX multiple buffer overflows

Few buffer overflows in Ywcvwr.dll library...

CVE-2007-3147: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

CVE-2007-3148: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

Yahoo! Messenger Webcam ActiveX Buffer Overflows

The remote host contains the 'Webcam' ActiveX controls included with Yahoo! Messenger. The version of at least one of these controls on the remote host has a buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be...

雅虎通Webcam Viewer ActiveX控件远程栈溢出漏洞

雅虎通是一款非常流行的即时通讯工具。 雅虎通的Webcam Viewer ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 雅虎通的Webcam Viewer（ywcvwr.dll）ActiveX控件没有正确地验证对Server属性的输入。如果用户受骗访问了恶意站点向该属性传送了超长字符串然后又调用了Receive方式的话，就可能触发栈溢出，导致执行任意指令。 Yahoo! Messenger 8.1.0.249 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.yahoo.com/...

Yahoo! Messenger Webcam 8.1 (Ywcvwr.dll) Download / Execute Exploit

No description provided by source. / Compile in LCC-win32 Free! Download and exec any file you like! Have Fun! / include stdio.h include string.h include stdlib.h char file = "Clickhere.html"; FILE fp = NULL; unsigned char sc =...

Yahoo! Messenger Webcam 8.1 (Ywcupl.dll) Download / Execute Exploit

No description provided by source. / Compile in LCC-win32 Free! Download and exec any file you like! Have Fun! / include stdio.h include string.h include stdlib.h char file = "Clickhere.html"; FILE fp = NULL; unsigned char sc =...

Yahoo Messenger Webcam Viewer ActiveX control buffer overflow

Added: 06/08/2007 CVE: CVE-2007-3148 BID: 24355 OSVDB: 37081 Background Yahoo! Messenger is an instant messaging application. It includes the Webcam Viewer ActiveX control which is provided by ywcvwr.dll. Problem A buffer overflow vulnerability in the Yahoo! Messenger Webcam Viewer ActiveX contro...

Yahoo! Messenger Webcam 8.1 (Ywcvwr.dll) Download / Execute Exploit

Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Messenger Webcam 8.1 Ywcvwr.dll Download / Execute Exploit =================================================================== / Compile in LCC-win32 Free! Download...