PRIOn knowledge basePRION:CVE-2008-0623

HistoryFeb 06, 2008 - 9:00 p.m.

Stack overflow

2008-02-0621:00:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.204 Low

EPSS

Percentile

96.4%

JSON

Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.

CPENameOperatorVersion
music_jukeboxeq2.2.2.056

CPE	Name	Operator	Version
	music_jukebox	eq	2.2.2.056

References

secunia.com/advisories/28757

www.kb.cert.org/vuls/id/101676

www.securityfocus.com/bid/27590

www.securitytracker.com/id?1019301

www.vupen.com/english/advisories/2008/0396/references

www.exploit-db.com/exploits/5043

www.exploit-db.com/exploits/5046

www.exploit-db.com/exploits/5048