Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Yahoo! Messenger YMailAttach ActiveX Control Remote Buffer Overflow Vulnerability

The YMailAttach ActiveX control shipped with Yahoo! Messenger is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer.

Yahoo! Messenger versions released prior to November 2, 2006 are vulnerable to this issue.







 

Privacy Statement
Copyright 2008, SecurityFocus