CVE-2007-3147
HIGH 9.3EPSS 40.2%
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
- CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 40.23% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2007-06-11
- Updated
- 2024-08-07
Metasploit modules (1)
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/16519
- https://www.exploit-db.com/exploits/4053
- https://www.exploit-db.com/exploits/4042
Security advisories
- http://research.eeye.com/html/advisories/published/AD20070608.html
- http://research.eeye.com/html/advisories/upcoming/20070605.html
- http://secunia.com/advisories/25547
- http://messenger.yahoo.com/security_update.php?id=060707
- http://www.kb.cert.org/vuls/id/949817
- http://www.securityfocus.com/bid/24341
- http://www.securityfocus.com/bid/24354