Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Yahoo! Messenger ActiveX Control YVerInfo.dll use exploit/windows/browser/yahoomessenger/fvcom msf undefinedfvcom show actions ...actions... msf undefinedfvcom set ACTION msf undefinedfvcom show options ...show and set options... msf...

Yahoo! Messenger 8.1.0.413 (webcam) Remote Crash Exploit

No description provided by source. Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger...

Yahoo! Messenger YVerInfo ActiveX Buffer Overflows

The remote host contains the 'YVerInfo' ActiveX control, distributed as part of the Yahoo! services suite typically downloaded with the installer for Yahoo! Messenger. The version of this control installed on the remote host reportedly contains buffer overflows involving its 'fvCom' and 'info'...

Yahoo! Messenger < 8.1.0.419 YVerInfo ActiveX Buffer Overflow

Binary data 4199.prm...

Yahoo! Messenger 8.1.0.413 (webcam) Remote Crash Exploit

Exploit for unknown platform in category dos / poc ======================================================== Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit ======================================================== Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2...

Yahoo! Messenger 8.1 - File Transfer Denial of Service

Yahoo! Messenger 8.1 - File Transfer Denial of Service source: https://www.securityfocus.com/bid/25484/info Yahoo! Messenger is prone to a denial-of-service vulnerability because it fails to handle certain file-transfer packets. Attackers can exploit this issue to crash the application, causing...

Yahoo! Messenger 8.1.0.413 - webcam Remote Crash

Yahoo! Messenger 8.1.0.413 - webcam Remote Crash Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger. 3.when the otherside accept the invatation , inject the dll to local yahoo! messeng...

Yahoo! Messenger 8.1 - File Transfer Denial of Service

source: https://www.securityfocus.com/bid/25484/info Yahoo! Messenger is prone to a denial-of-service vulnerability because it fails to handle certain file-transfer packets. Attackers can exploit this issue to crash the application, causing denial-of-service conditions. NOTE: This issue is...

Yahoo! Messenger 8.1.0.413 - 'webcam' Remote Crash

Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger. 3.when the otherside accept the invatation , inject the dll to local yahoo! messenger 8.1.0.413 's process. 4 . the otherside's yaho...

Yahoo! Messenger < 8.1.0.416 Multiple Vulnerabilities

The version of Yahoo! Messenger installed on the remote host is reportedly affected by a buffer overflow as well as a denial of service vulnerability, both involving its video chat feature. If an attacker can trick a user on the affected host into accepting a webcam invitation, these issues could...

PHP 5.2.3 - PHP_win32sti Local Buffer Overflow (2)

PHP 5.2.3 - PHPwin32sti Local Buffer Overflow 2 "adm1n" password="netjackal" $SC= "\xEB\x19\x5A\x31\xC0\x50\x88\x42\x52\x52\xBB\x6D\x13\x86". "\x7C\xFF\xD3\xBB\xDA\xCD\x81\x7C\x31\xC0\x50\xFF\xD3\xE8". "\xE2\xFF\xFF\xFF\x63\x6D\x64\x2E\x65\x78\x65\x20\x2F\x63"...

雅虎通ywcvwr.dll远程堆溢出漏洞

BUGTRAQ ID: 25330 雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理畸形功能请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 雅虎通中有个名为webcam的功能。当webcam请求初始化的时候雅虎通会生成一个类（webcamclass），webcamclass会在这个地方（ywcvwr.dll）申请一段内存，这段内存的长度是0x400： .text:10001737 cmp edi, esp+0Ch+arg0 .text:1000173B jl short loc10001735 .text:1000173D cmp edi, 1400000h...

Heap overflow

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

CVE-2007-4391

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

CVE-2007-4391

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

CVE-2007-4391

CVE-2007-4391 describes a heap-based buffer overflow in Kakadu kdu_v32m.dll used by Yahoo! Messenger 8.1.0.413 that can be triggered by a crafted JPEG2000 length field in a webcam invitation, potentially causing an application crash or remote code execution. Public disclosures link the issue to Y...

Yahoo! Messenger KDU_V32M.DLL远程拒绝服务漏洞

Yahoo! Messenger是一款流行的即时通信程序。 Yahoo! Messenger包含的kduv32m.dll库存在缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题是kduv32m.dll库对图片的长度宽度及tile的长度和宽度缺少正确处理，构建这些参数，使起new的参数为0，就可以导致应用程序崩溃，造成拒绝服务攻击。 Yahoo! Messenger 8.1 目前没有详细解决方案提供： http://messenger.yahoo.com/ 可参考如下测试程序： http://www.team509.com/expyahoo.rar...

CVE-2007-4391: Improper Input Validation

Heap-based buffer overflow in Kakadu kduv32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service application crash via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the...

Yahoo! Installer Plugin for Widgets ActiveX control stack buffer overflow

Overview The Yahoo! Installer Plugin for Widgets ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Widgets is a program for Windows that allows the user to run applications call...

Yahoo! Messenger webcam stream heap overflow

Overview Yahoo! Messenger fails to properly handle webcam streams, which may allow a remote attacker to execute arbitrary code. Description Yahoo! Messenger is an instant messaging application that is available for Windows, Mac, Unix, web, and mobile systems. Some version of Yahoo! Messenger, suc...