Yahoo工具条YShortcut.dll控件缓冲区溢出漏洞

CNCAN ID:CNCAN-2007122011 Yahoo toolbar是一款嵌入到浏览器的工具条。 Yahoo toolbar包含的ActiveX YShortcut.dll存在缓冲区溢出，远程攻击者可以利用漏洞可能以应用程序进程权限执行任意指令。 YShortcut是Yahoo工具栏允许映射URL为快捷方式的工具，其中IsTaggedBM函数在WEB浏览器地址栏上输入任何东西时调用，如果传递超过3000字符的数据，可导致缓冲区溢出。相对于自身的边界检查，Yahoo依靠IE浏览器上的2083最大URL长度来控制，此对象没有被标记为安全脚本： YShortcut.dll,...

CVE-2007-6228

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service browser crash via a long argument to the c method...

Stack overflow

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service browser crash via a long argument to the c method...

CVE-2007-6228

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service browser crash via a long argument to the c method...

CVE-2007-6228

The CVE-2007-6228 issue is a stack-based buffer overflow in the yt.ythelper.2 ActiveX control used by Yahoo! Toolbar 1.4.1. A long argument to the c() method can remotely trigger a denial of service (browser crash). Public documentation notes no patch from the vendor at the time of reports; users...

CVE-2007-6228: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service browser crash via a long argument to the c method...

Yahoo! Toolbar Helper类ActiveX控件远程缓冲区拒绝服务漏洞

Yahoo! Toolbar是基于浏览器的插件。 Yahoo! Toolbar Helper类ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于Yahoo! Toolbar Helper类中的c方法中，构建超长字符串作为参数数据，并诱使用户访问，可导致以应用程序进程权限执行任意指令。 Yahoo! Toolbar 1.4.1 目前没有详细解决方案提供： http://toolbar.yahoo.com/ ---------------------- !-- written by e.b. -- html head script...

Yahoo! Toolbar 1.4.1 Helper - Class ActiveX Control Remote Buffer Overflow (Denial of Service) (PoC)

Yahoo! Toolbar 1.4.1 Helper - Class ActiveX Control Remote Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/26656/info Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to trigger denial-of-service...

Yahoo! Toolbar 1.4.1 Helper - Class ActiveX Control Remote Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/26656/info Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the vulnerable ActiveX control. Reports...

runcms-overwrite.txt

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

RunCMS 1.6 - disclaimer.php Remote File Overwrite

RunCMS 1.6 - disclaimer.php Remote File Overwrite RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px;...

RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit

Exploit for unknown platform in category web applications ========================================================== RunCMS RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px;...

RunCMS 1.6 - 'disclaimer.php' Remote File Overwrite

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

Unfixed XSS vulnerability at it.festivalbar.music.yahoo.net

Security researcher www.r3t.n3t.nl, has submitted on 24/11/2007 a cross-site-scripting XSS vulnerability affecting it.festivalbar.music.yahoo.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Format string

Format string vulnerability in the extyahoocontactadded function in yahoo.c in Miranda IM 0.7.1 allows remote attackers to execute arbitrary code via a Y7 Buddy Authorization packet with format string specifiers in the contact Yahoo! handle who...

CVE-2007-5396

Miranda IM 0.7.1 is affected by a format-string vulnerability in the ext_yahoo_contact_added function (yahoo.c) that allows remote code execution via a Y7 Buddy Authorization packet containing format specifiers in the contact Yahoo! handle (who). This CVE-2007-5396 issue is triggered by crafted i...

CVE-2002-2361

The vulnerability CVE-2002-2361 affects Yahoo! Messenger installers (versions 4.0, 5.0, 5.5). The root cause is that the installer does not verify package signatures, allowing a remote attacker to substitute a trojan-laden package via DNS spoofing. Practical impact is installation of unauthentica...

CVE-2002-2361

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing...

CVE-2002-2361: Undefined Security Weakness

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing...

Miranda IM多个远程栈溢出漏洞

BUGTRAQ ID: 26115 CVECAN ID: CVE-2007-5542,CVE-2007-5543 Miranda IM是Microsoft Windows平台上使用的开源多协议即时消息客户端。 Miranda IM没有正确地实现雅虎通协议，如果向客户端发送了畸形的雅虎通报文的话，就可以触发栈溢出，导致执行任意指令。 Miranda Miranda IM 0.7 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceforge.net/project/showfiles.php?groupid=94142...