3 matches found
CVE-2008-0625
CVE-2008-0625 is a buffer overflow in Yahoo! Music Jukebox MediaGrid ActiveX (mediagrid.dll) that allows remote code execution when a user loads a page calling AddBitmap with a long argument in Yahoo! Music Jukebox 2.2.2.56. Exploitation requires the user to view a crafted page in Internet Explor...
CVE-2008-0623
CVE-2008-0623 : A stack-based buffer overflow in Yahoo! Music Jukebox 2.2.2.056’s YMP Datagrid ActiveX control (datagrid.dll) can be triggered by a long argument to AddImage, enabling remote code execution. Affected product/version: Yahoo! Music Jukebox 2.2.2.056; vulnerable component is the Data...
CVE-2008-0624
Yahoo! Music Jukebox ActiveX/DataGrid (datagrid.dll) on Yahoo! Jukebox 2.2.2.56/056 is affected by stack-based buffer overflows in AddImage and AddButton methods, enabling remote code execution via a long string argument. Versions referenced include 2.2.2.56 and 2.2.2.056. No vendor patch is evid...