CVE-2008-0624: Buffer Overflow

Published Feb 6, 2008

Updated

Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.

Affected Software

1 affected component

Yahoo Music Jukebox=2.2.2.56

Event History

Feb 6, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0624?

CVE-2008-0624 has a critical severity as it allows remote attackers to execute arbitrary code on vulnerable systems.

How do I fix CVE-2008-0624?

To address CVE-2008-0624, users should update to the latest version of Yahoo Music Jukebox or remove the affected application.

What systems are affected by CVE-2008-0624?

CVE-2008-0624 specifically affects Yahoo Music Jukebox version 2.2.2.56.

How does CVE-2008-0624 exploit a buffer overflow?

CVE-2008-0624 exploits a buffer overflow through a long argument passed to the AddButton method in the YMP Datagrid ActiveX control.

Is CVE-2008-0624 related to any other vulnerabilities?

Yes, CVE-2008-0624 is related to CVE-2008-0623 but presents a different exploitation vector.