CVE-2007-3928: Buffer Overflow
Published Jul 21, 2007
·Updated
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638.
Affected Software
1 affected component
Yahoo Messenger=8.1
Remediation
Patch Available
Patch Available
Event History
Jul 21, 2007
CVE Published
12:30 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3928?
CVE-2007-3928 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2007-3928?
To address CVE-2007-3928, update Yahoo Messenger to a later version beyond 8.1.
3
Who is affected by CVE-2007-3928?
CVE-2007-3928 primarily affects users of Yahoo Messenger version 8.1.
4
What kind of attack is possible with CVE-2007-3928?
CVE-2007-3928 allows for user-assisted remote authenticated users to execute arbitrary code.
5
Is there a workaround for CVE-2007-3928?
A recommended workaround for CVE-2007-3928 is to avoid using the vulnerable version and disable any address book functionalities.