CVE-2008-0623

CVE-2008-0623 : A stack-based buffer overflow in Yahoo! Music Jukebox 2.2.2.056’s YMP Datagrid ActiveX control (datagrid.dll) can be triggered by a long argument to AddImage, enabling remote code execution. Affected product/version: Yahoo! Music Jukebox 2.2.2.056; vulnerable component is the Data...

CVE-2008-0624

Buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623...

CVE-2008-0623: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method...

CVE-2008-0625: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the MediaGrid ActiveX control mediagrid.dll in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method...

Yahoo JukeBox ActiveX buffer overflow

Buffer overflow in AddBitmap method...

[Full-disclosure] Yahoo! JukeBox MediaGrid ActiveX Control AddBitmap() Buffer Overflow

Who: Yahoo! http://www.yahoo.com What: mediagrid.dll version 2.2.2.56 22FD7C0A-850C-4A53-9821-0B0915C96139 Implements IObjectSafety This control is used with the Yahoo! JukeBox application. How: The 2nd parameter of the AddBitmap method is vulnerable to a buffer overflow. Fix: No official fix kno...

KLA10407 ACE vulnerability in Yahoo! Music Jukebox

Buffer overflows were found in Yahoo! Music Jukebox. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed arguments to different methods. Original advisories - Exploitation Public exploits exist for thi...

CVE-2008-0624: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623...

Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit

No description provided by source. !-- Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, mediagrid.dll version 2.2.2.56 Thanks to h.d.m. and the Metasploit crew -- html head titleYahoo!...

Yahoo! Music Jukebox 2.2 AddButton() ActiveX Remote BOF Exploit (3)

No description provided by source. !-- Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit written by e.b. Vulnerability discovered by Krystian Kloskowski [email protected] Inspired by http://milw0rm.com/exploits/5046 Tested on Windows XP SP2fully patched English, IE6, datagrid.dll version...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit (2)

No description provided by source. !-- Yahoo! Music Jukebox 2.2 AddImage ActiveX BOF Discovered by Krystian Kloskowski - [email protected] Written by exceed code ripped from here and there... Tested on Windows XP SP3 English / IE6 SP3 / datagrid.dll v2.2.2.56 -- html object...

Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control stack buffer overflow

Overview The Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes multip...

Yahoo! Music Jukebox YMP Datagrid ActiveX control stack buffer overflows

Overview The Yahoo! Music Jukebox YMP Datagrid ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes...

yahoomusic-overflow2.txt

Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

yahoomusic-overflow.txt

// HeapSpray - execute calculator calc.exe shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" + "%u3058%u3142%u4250%u6b41%u4142%u4253%u4232%u3241" + "%u4141%u4130%u5841%u3850%u4242%u4875%u6b69%u4d4c" +...

yahoomusic-overflow4.txt

Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit

No description provided by source. ?php // 0x48k-ymj by ... // based on /5043 // Bug discovered by Krystian Kloskowski h07 [email protected] function unescape$s $res=strtoupperbin2hex$s; $g = roundstrlen$res/4; if $g != strlen$res/4$res.="00"; $out = "";...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ============================================================== Yahoo! Music Jukebox 2.2 AddImage ActiveX Remote BOF Exploit ============================================================== function unescape$s $res=strtoupperbin2hex$s; $g =...

Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap BOF Exploit ====================================================================== Yahoo! JukeBox MediaGrid...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF PoC Exploit

No description provided by source. !-- Yahoo! Music Jukebox 2.2 AddImage ActiveX 0day Remote Buffer Overlow PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Product homepage: http://music.yahoo.com/jukebox/ Tested on:.. - Yahoo! Music Jukebox 2.2.2.056 - MS IE 6 Details:...