NVD

Id
56165  
Name
CVE-2007-4034  
Description
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-27  
Modified Date
2011-03-07  
Seq
2007-4034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286112 56165 CVE-2007-4034 http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html  View
286113 56165 CVE-2007-4034 VU#120760  View
286114 56165 CVE-2007-4034 25086  View
286115 56165 CVE-2007-4034 1018470  View
286116 56165 CVE-2007-4034 ADV-2007-2679  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57207 JVNDB-2007-005899 Yahoo! Widgets の YDPCTL.dll におけるスタックベースのバッファオーバーフローの脆弱性 Yahoo! Widgets の YDPCTL.dll の YDPCTL.YDPControl.1 ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-4034 27389 CVE-2007-4034 56165 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005899.html 2007-07-27 2012-12-20 View