2407 matches found
Heap overflow
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...
Buffer overflow
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the 1 fvCom and 2 info methods. NOTE: some of these...
CVE-2007-4515
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the 1 fvCom and 2 info methods. NOTE: some of these...
CVE-2007-4515
CVE-2007-4515 is a buffer overflow vulnerability in Yahoo! Messenger’s YVerInfo.dll ActiveX control (pre-7/27/2007 build). The issue allows remote code execution via faulty arguments to fvCom and info methods, affecting Messenger prior to 8.1.0.419. Documents show public exploitation modules (e.g...
CVE-2007-2931
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions...
CVE-2007-2931
CVE-2007-2931 describes a heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, 7.5 and Windows Live Messenger 8.0, triggered during processing of webcam/video chat sessions. The vulnerability allows user-assisted remote code execution if a user accepts a specially crafted video/webcam ...
CVE-2007-4515
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the 1 fvCom and 2 info methods. NOTE: some of these...
KLA10397 ACE vulnerability in MSN & Live
A buffer overflow was found in Microsoft Live. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products Microsoft-MSN-Messenger Windows-Live-Messenger CVE list...
Yahoo Messenger ActiveX buffer overflow
Buffer overflows in fvCom and info methods of YVerInfo.GetInfo.1...
iDefense Security Advisory 08.30.07: Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities
Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities iDefense Security Advisory 08.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 30, 2007 I. BACKGROUND Yahoo! Messenger is a instant messaging application that allows users to chat online, share...
MSN messenger 7.x (8.0?) VIDEO Remote Heap Overflow Exploit
No description provided by source. MSN messenger 7.x 8.0? VIDEO Remote Heap Overflow Exploit thanks ole andre again, His ospy is perfect. 1.compile the dll. 2.inject the dll to msn messenger 7.0.777.0 's process. 3. choose "send my webcam" to a contact id who is online using 7.x 8.0?...
Yahoo! Messenger < 8.1.0.419 YVerInfo ActiveX Buffer Overflow
Binary data 4199.prm...
Yahoo! Messenger 8.1.0.413 (webcam) Remote Crash Exploit
No description provided by source. Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger...
Yahoo! Messenger YVerInfo ActiveX Buffer Overflows
The remote host contains the 'YVerInfo' ActiveX control, distributed as part of the Yahoo! services suite typically downloaded with the installer for Yahoo! Messenger. The version of this control installed on the remote host reportedly contains buffer overflows involving its 'fvCom' and 'info'...
Yahoo! Messenger 8.1.0.413 - webcam Remote Crash
Yahoo! Messenger 8.1.0.413 - webcam Remote Crash Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger. 3.when the otherside accept the invatation , inject the dll to local yahoo! messeng...
MSN messenger 7.x (8.0?) VIDEO Remote Heap Overflow Exploit
Exploit for unknown platform in category remote exploits =========================================================== MSN messenger 7.x 8.0? VIDEO Remote Heap Overflow Exploit =========================================================== thanks ole andre again, His ospy is perfect. 1.compile the dll...
Yahoo! Messenger 8.1 - File Transfer Denial of Service
Yahoo! Messenger 8.1 - File Transfer Denial of Service source: https://www.securityfocus.com/bid/25484/info Yahoo! Messenger is prone to a denial-of-service vulnerability because it fails to handle certain file-transfer packets. Attackers can exploit this issue to crash the application, causing...
Yahoo! Messenger 8.1.0.413 - 'webcam' Remote Crash
Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2. choose "invite to view my webcam" to a contact id who is online using yahoo! messenger. 3.when the otherside accept the invatation , inject the dll to local yahoo! messenger 8.1.0.413 's process. 4 . the otherside's yaho...
Yahoo! Messenger 8.1.0.413 (webcam) Remote Crash Exploit
Exploit for unknown platform in category dos / poc ======================================================== Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit ======================================================== Yahoo! Messenger 8.1.0.413 webcam Remote Crash Exploit 1.compile the dll. 2...
Yahoo! Messenger 8.1 - File Transfer Denial of Service
source: https://www.securityfocus.com/bid/25484/info Yahoo! Messenger is prone to a denial-of-service vulnerability because it fails to handle certain file-transfer packets. Attackers can exploit this issue to crash the application, causing denial-of-service conditions. NOTE: This issue is...