virus logo Intrusion Prevention

Yahoo!.Widgets.YDP.ActiveX.Control.Command.Execution

description-logoDescription

This indicates a vulnerability in Yahoo! Widgets. The vulnerability is caused by a stack based buffer overflow in the "GetComponentVersion()" method within the YDPCTL.dll ActiveX control. It allows remote attackers to cause a denial of service via a crafted web page.

affected-products-logoAffected Products

Yahoo! Widgets versions prior to 4.0.5

Impact logoImpact

Denial of service.

recomended-action-logoRecommended Actions

Currently we are not aware of any official fix for this issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-11-04 16.956 Name:Yahoo.
Widgets.
YDP.
ActiveX.
Control.
Command.
Execution:Yahoo!.
Widgets.
YDP.
ActiveX.
Control.
Command.
Execution

References

http://help.yahoo.com/l/us/yahoo/widgets/security/security-08.html# http://secunia.com/advisories/26011/
ID 14827
Created Jul 31, 2007
Updated Nov 15, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2007-4034
Exploit Prediction Score 92.64%
Default Action drop
Active
Affected OS Windows
Affected App Other