CVE-2007-4635: Buffer Overflow

Published Aug 31, 2007

Updated

Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe. NOTE: this might be related to CVE-2007-4515. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

2 affected components

Yahoo Messenger=8.1.0.402

Yahoo Messenger=8.1.0.209

Event History

Aug 31, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4635?

CVE-2007-4635 has been classified as a denial of service vulnerability that can cause the Yahoo! Messenger application to crash.

How do I fix CVE-2007-4635?

To mitigate CVE-2007-4635, update to a newer version of Yahoo! Messenger that is not affected by this vulnerability.

Which versions of Yahoo! Messenger are affected by CVE-2007-4635?

CVE-2007-4635 affects Yahoo! Messenger versions 8.1.0.209 and 8.1.0.402.

What type of attack is CVE-2007-4635 associated with?

CVE-2007-4635 is associated with a denial of service attack that can lead to application crashes via manipulated file-transfer packets.

Is CVE-2007-4635 related to any other vulnerabilities?

Yes, CVE-2007-4635 may be related to CVE-2007-4515, indicating a potential connection in the nature of the vulnerabilities.