Buffer Overflow in MediaGrid ActiveX Control Affects Yahoo Music Jukebox
CVE-2008-0625

Currently unrated

Key Information:

Vendor

Yahoo

Status
Music Jukebox
Vendor
CVE Published:
6 February 2008

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2008-0625?

A buffer overflow vulnerability exists in the MediaGrid ActiveX control (mediagrid.dll) utilized by Yahoo! Music Jukebox 2.2.2.56. This vulnerability allows remote attackers to exploit the system by supplying a long argument to the AddBitmap method, potentially enabling them to execute arbitrary code on the affected system. The exploitation of this vulnerability poses significant risks for users, exposing them to unauthorized access and control over sensitive information.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-0625 - Proof of Concept

References

http://www.kb.cert.org/vuls/id/340860
third-party-advisoryx_refsource_CERT-VN
http://www.securityfocus.com/bid/27578
vdb-entryx_refsource_BID
https://www.exploit-db.com/exploits/5052
exploitx_refsource_EXPLOIT-DB

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.