CVE-2007-6535: Buffer Overflow
Published Dec 27, 2007
·Updated
Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a long string to the IsTaggedBM method.
Affected Software
1 affected component
Yahoo Toolbar
Event History
Dec 27, 2007
CVE Published
11:46 PM
Dec 28, 2007
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6535?
CVE-2007-6535 has a high severity rating due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2007-6535?
To fix CVE-2007-6535, update Yahoo Toolbar to a version that does not contain the vulnerable YShortcut ActiveX control.
3
What software is affected by CVE-2007-6535?
CVE-2007-6535 affects Yahoo Toolbar, particularly the YShortcut.dll version 2006.8.15.1.
4
What kind of attack is CVE-2007-6535 associated with?
CVE-2007-6535 is associated with buffer overflow attacks that can lead to arbitrary code execution.
5
Is CVE-2007-6535 still a risk today?
If you are using an outdated version of Yahoo Toolbar, CVE-2007-6535 may still pose a risk.