cbcvebase.
CVE-2007-1680
published 2007-04-06

CVE-2007-1680: Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows…

PriorityP340critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
8.38%
94.3th percentile
Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties.

Affected

5 ranges
VendorProductVersion rangeFixed in
yahoomessenger——
yahoomessenger——
yahoomessenger——
yahoomessenger——
yahoomessenger——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.