vulnwire
9.3crit

CVE-2007-43912 exploits

Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo!

Published 19 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.3%
percentile 95%
Public exploits
2
Exploit-DB

Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted.

Exploit prediction (EPSS)

9.31% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

  • EDB-4335 Yahoo! Messenger 8.1.0.413 - 'webcam' Remote Crash · dos · 2007-08-29
  • EDB-30500 Yahoo! Messenger 8.1 - 'KDU_V32M.DLL' Remote Denial of Service · dos · 2007-08-15

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-20 Improper Input Validation
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • vupen.com /english/advisories/2007/2917 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/36115 · vdb-entry, x_refsource_XF, x_transferred
  • kb.cert.org /vuls/id/515968 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • avertlabs.com /research/blog/index.php/2007/08/15/more-on-the-yahoo-messenger-webcam-0day/ · x_refsource_MISC, x_transferred
  • team509.com /expyahoo.rar · x_refsource_MISC, x_transferred
  • secunia.com /advisories/26501 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/25330 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /38221 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securitytracker.com /id?1018586 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • xfocus.net /bbs/index.php?act=ST&f=2&t=64639&page=1#entry321749 · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.