CVE-2008-0625

Buffer overflow in the MediaGrid ActiveX control mediagrid.dll in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method...

CVE-2008-0624

Yahoo! Music Jukebox ActiveX/DataGrid (datagrid.dll) on Yahoo! Jukebox 2.2.2.56/056 is affected by stack-based buffer overflows in AddImage and AddButton methods, enabling remote code execution via a long string argument. Versions referenced include 2.2.2.56 and 2.2.2.056. No vendor patch is evid...

CVE-2008-0625

CVE-2008-0625 is a buffer overflow in Yahoo! Music Jukebox MediaGrid ActiveX (mediagrid.dll) that allows remote code execution when a user loads a page calling AddBitmap with a long argument in Yahoo! Music Jukebox 2.2.2.56. Exploitation requires the user to view a crafted page in Internet Explor...

CVE-2008-0623

Stack-based buffer overflow in the YMP Datagrid ActiveX control datagrid.dll in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method...

KLA10407 ACE vulnerability in Yahoo! Music Jukebox

Buffer overflows were found in Yahoo! Music Jukebox. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed arguments to different methods. Original advisories - Exploitation Public exploits exist for thi...

[Full-disclosure] Yahoo! JukeBox MediaGrid ActiveX Control AddBitmap() Buffer Overflow

Who: Yahoo! http://www.yahoo.com What: mediagrid.dll version 2.2.2.56 22FD7C0A-850C-4A53-9821-0B0915C96139 Implements IObjectSafety This control is used with the Yahoo! JukeBox application. How: The 2nd parameter of the AddBitmap method is vulnerable to a buffer overflow. Fix: No official fix kno...

Yahoo JukeBox ActiveX buffer overflow

Buffer overflow in AddBitmap method...

Yahoo! Music Jukebox 2.2 AddButton() ActiveX Remote BOF Exploit (3)

No description provided by source. !-- Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit written by e.b. Vulnerability discovered by Krystian Kloskowski [email protected] Inspired by http://milw0rm.com/exploits/5046 Tested on Windows XP SP2fully patched English, IE6, datagrid.dll version...

Yahoo! Music Jukebox YMP Datagrid ActiveX control stack buffer overflows

Overview The Yahoo! Music Jukebox YMP Datagrid ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes...

Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control stack buffer overflow

Overview The Yahoo! Music Jukebox Yahoo! MediaGrid ActiveX control contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo! Music Jukebox is a music player for Microsoft Windows, which includes multip...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit (2)

No description provided by source. !-- Yahoo! Music Jukebox 2.2 AddImage ActiveX BOF Discovered by Krystian Kloskowski - [email protected] Written by exceed code ripped from here and there... Tested on Windows XP SP3 English / IE6 SP3 / datagrid.dll v2.2.2.56 -- html object...

Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit

No description provided by source. !-- Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, mediagrid.dll version 2.2.2.56 Thanks to h.d.m. and the Metasploit crew -- html head titleYahoo!...

yahoomusic-overflow2.txt

Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

yahoomusic-overflow.txt

// HeapSpray - execute calculator calc.exe shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" + "%u3058%u3142%u4250%u6b41%u4142%u4253%u4232%u3241" + "%u4141%u4130%u5841%u3850%u4242%u4875%u6b69%u4d4c" +...

yahoomusic-overflow4.txt

Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Yahoo! Music Jukebox 2.2 AddButton() ActiveX Remote BOF Exploit (3)

Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Music Jukebox 2.2 AddButton ActiveX Remote BOF Exploit 3 =================================================================== Yahoo! JukeBox datagrid.dll AddButton...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF PoC Exploit

No description provided by source. !-- Yahoo! Music Jukebox 2.2 AddImage ActiveX 0day Remote Buffer Overlow PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Product homepage: http://music.yahoo.com/jukebox/ Tested on:.. - Yahoo! Music Jukebox 2.2.2.056 - MS IE 6 Details:...

Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit (2)

Exploit for unknown platform in category remote exploits ================================================================== Yahoo! Music Jukebox 2.2 AddImage ActiveX Remote BOF Exploit 2 ================================================================== // HeapSpray - execute calculator calc.exe...

Yahoo! JukeBox MediaGrid - 'AddBitmap()' ActiveX Buffer Overflow

Yahoo! JukeBox MediaGrid ActiveX Control mediagrid.dll AddBitmap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Yahoo! Music JukeBox 2.2 - 'AddButton()' ActiveX Remote Buffer Overflow

Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...