Stack-based Buffer Overflow in Yahoo! Music Jukebox Affects Users
CVE-2008-0623
Currently unrated
Key Information:
- Vendor
Yahoo
- Status
- Vendor
- CVE Published:
- 6 February 2008
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-0623?
A stack-based buffer overflow in the YMP Datagrid ActiveX control, part of Yahoo! Music Jukebox version 2.2.2.056, allows remote attackers to exploit the vulnerability by sending a specially crafted long argument to the AddImage method. Successful exploitation could enable attackers to execute arbitrary code on the victim's machine, posing significant security risks to users.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.