Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Yahoo! Messenger YMailAttach ActiveX Control Remote Buffer Overflow Vulnerability

The YMailAttach ActiveX control shipped with Yahoo! Messenger is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer.

Yahoo! Messenger versions released prior to November 2, 2006 are vulnerable to this issue.







 

Privacy Statement
Copyright 2009, SecurityFocus