Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
雅虎通ywcvwr.dll远程堆溢出漏洞
Vulnerability Description
"雅虎通是一款非常流行的即时通讯工具。 雅虎通在处理畸形功能请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 雅虎通中有个名为webcam的功能。当webcam请求初始化的时候雅虎通会生成一个类(webcamclass)，webcamclass会在这个地方(ywcvwr.dll)申请一段内存，这段内存的长度是0x400： .text:10001737 cmp edi, [esp+0Ch+arg_0] .text:1000173B jl short loc_10001735 .text:10
CVSS Information
N/A
Vulnerability Type
N/A