CVE-2008-2111

EPSS 5.4%

The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/31748unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/30115 http://secway.org/advisory/AD20080506EN.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/42233 http://www.securityfocus.com/bid/29065 http://www.securitytracker.com/id?1020004 http://www.vupen.com/english/advisories/2008/1471/references