Lucene search
HistoryMay 07, 2008 - 11:20 p.m.
CVE-2008-2111
yahoo! assistant
activex control
remote code execution
cve-2008-2111
memory corruption
vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
Low
0.071 Low
EPSS
Percentile
94.0%
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Affected configurations
Node
yahooyahoo_assistantRange≤3.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| yahoo:yahoo_assistant | yahoo yahoo assistant | le | 3.6 |
Related
prion
prion
Memory corruption
2008-05-07 23:20:00
cvelist
cvelist
CVE-2008-2111
2008-05-07 23:00:00
nvd
nvd
CVE-2008-2111
2008-05-07 23:20:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
Low
0.071 Low
EPSS
Percentile
94.0%
Related for CVE-2008-2111