CVE-2007-3148: Buffer Overflow
Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3148?
CVE-2007-3148 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-3148?
To mitigate CVE-2007-3148, users should update to a patched version of Yahoo Messenger that addresses this buffer overflow issue.
Which versions of Yahoo Messenger are affected by CVE-2007-3148?
CVE-2007-3148 affects Yahoo Messenger versions 8.1.0.249, 8.0.1, 8.0, and earlier versions including 2.0.1.4.
Who can exploit CVE-2007-3148?
CVE-2007-3148 can be exploited by remote attackers who send specially crafted server property values.
What can happen if CVE-2007-3148 is exploited?
If CVE-2007-3148 is successfully exploited, it can allow an attacker to execute arbitrary code on the victim's machine.