CVE-2008-2111: Critical severity yahoo yahoo vulnerability
Published May 7, 2008
·Updated
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Affected Software
1 affected component
Yahoo Yahoo Assistant<=3.6
Event History
May 7, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2111?
CVE-2008-2111 is considered to have a high severity due to the potential for remote code execution.
2
How do I fix CVE-2008-2111?
To fix CVE-2008-2111, users should upgrade to a version of Yahoo Assistant that is later than 3.6.
3
What software is affected by CVE-2008-2111?
CVE-2008-2111 affects Yahoo Assistant versions 3.6 and earlier.
4
What type of vulnerability is CVE-2008-2111?
CVE-2008-2111 is a remote code execution vulnerability caused by memory corruption in the yNotifier.dll ActiveX Control.
5
Can CVE-2008-2111 be exploited remotely?
Yes, CVE-2008-2111 can be exploited remotely, allowing attackers to execute arbitrary code.