Vulnerability Details : CVE-2007-4391
Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted.
Vulnerability category: OverflowInput validationDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2007-4391
Probability of exploitation activity in the next 30 days: 6.34%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 93 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2007-4391
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2007-4391
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2007-4391
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/36115
-
http://www.kb.cert.org/vuls/id/515968
US Government Resource
-
http://www.team509.com/expyahoo.rar
-
https://www.xfocus.net/bbs/index.php?act=ST&f=2&t=64639&page=1#entry321749
-
http://www.securitytracker.com/id?1018586
-
http://www.vupen.com/english/advisories/2007/2917
-
http://www.avertlabs.com/research/blog/index.php/2007/08/15/more-on-the-yahoo-messenger-webcam-0day/
-
http://www.securityfocus.com/bid/25330
Products affected by CVE-2007-4391
- cpe:2.3:a:yahoo:messenger:8.1.0.413:*:*:*:*:*:*:*