CVE-2007-1680

N/A Unknown
Published: April 06, 2007 Modified: April 23, 2026
View on NVD

Description

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://messenger.yahoo.com/security_update.php?id=031207
Source: cve@mitre.org
Patch
http://osvdb.org/34319
Source: cve@mitre.org
http://secunia.com/advisories/24742
Source: cve@mitre.org
Patch Vendor Advisory
http://securityreason.com/securityalert/2523
Source: cve@mitre.org
http://www.kb.cert.org/vuls/id/388377
Source: cve@mitre.org
US Government Resource
http://www.securityfocus.com/archive/1/464607/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/23291
Source: cve@mitre.org
Patch Vendor Advisory
http://www.securitytracker.com/id?1017867
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2007/1219
Source: cve@mitre.org
http://www.zerodayinitiative.com/advisories/ZDI-07-012.html
Source: cve@mitre.org
Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33408
Source: cve@mitre.org
http://messenger.yahoo.com/security_update.php?id=031207
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://osvdb.org/34319
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/24742
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://securityreason.com/securityalert/2523
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.kb.cert.org/vuls/id/388377
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.securityfocus.com/archive/1/464607/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/23291
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.securitytracker.com/id?1017867
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2007/1219
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.zerodayinitiative.com/advisories/ZDI-07-012.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33408
Source: af854a3a-2127-422b-91ae-364da2661108

22 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
43.3%
98th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

yahoo