CVE-2007-6228: Buffer Overflow
Published Dec 4, 2007
·Updated
Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service (browser crash) via a long argument to the c method.
Affected Software
1 affected component
Yahoo Toolbar=1.4.1
Event History
Dec 4, 2007
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6228?
CVE-2007-6228 is considered a medium severity vulnerability due to its ability to cause a denial of service.
2
How does CVE-2007-6228 exploit occur?
The exploit occurs through a stack-based buffer overflow in the Helper class of the Yahoo Toolbar ActiveX control.
3
What software is affected by CVE-2007-6228?
CVE-2007-6228 affects Yahoo Toolbar version 1.4.1.
4
How do I fix CVE-2007-6228?
To fix CVE-2007-6228, users should uninstall Yahoo Toolbar version 1.4.1 or upgrade to a patched version if available.
5
Can attackers remotely exploit CVE-2007-6228?
Yes, attackers can remotely exploit CVE-2007-6228 by sending a long argument to the c method in the ActiveX control.