CVE-2007-4034 in Widgetsinfo

Summary

Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method. NOTE: some of these details are obtained from third party information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

07/27/2007

Disclosure

07/27/2007

CPE

ready

Exploit

Download

CVSS

10.0

EPSS

0.31223

Activities

Very Low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!