CVE-2007-3638: Buffer Overflow
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code via unspecified vectors, aka ZD-00000005. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3638?
CVE-2007-3638 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-3638?
To mitigate CVE-2007-3638, users should update to a more secure version of Yahoo Messenger or discontinue its use.
Who is affected by CVE-2007-3638?
CVE-2007-3638 affects users of Yahoo Messenger version 8.1 who have malicious authenticated contacts in their address book.
What type of vulnerability is CVE-2007-3638?
CVE-2007-3638 is a buffer overflow vulnerability that can lead to arbitrary code execution.
Can CVE-2007-3638 be exploited remotely?
CVE-2007-3638 requires user assistance for exploitation, as it can only be triggered by interactions with compromised contacts.