CVE-2007-4515

Description

Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/36363

http://www.vupen.com/english/advisories/2007/3011

http://www.securityfocus.com/bid/25494

http://securitytracker.com/id?1018628

http://securityreason.com/securityalert/3083

http://secunia.com/advisories/26579

http://osvdb.org/37739

http://messenger.yahoo.com/security_update.php?id=082907

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3