yahoo

Records76All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

yahoo records in CISA KEV

No yahoo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Messenger 33 records HIGH Yui 12 records LOW Toolbar 5 records LOW Music Jukebox 3 records LOW Yahoo! Browser 3 records LOW Athenz 1 record LOW Audio Conferencing Activex Control 1 record LOW Japan Shopping 1 record LOW

Records

3 records in Music Jukebox · all components

TI-2008-00595 CVE-2008-0623 · GHSA-7x66-5cj5-5342

Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo!…

LOW 32

Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.09151 Published 2008-02-06 No fix listed CWE-119

TI-2008-00597 CVE-2008-0625 · GHSA-c3cp-rcm6-572j

Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox…

LOW 31

Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08104 Published 2008-02-06 No fix listed CWE-119

TI-2008-00596 CVE-2008-0624 · GHSA-f7q7-hw5g-fcvf

Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox…

LOW 30

Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07595 Published 2008-02-06 No fix listed CWE-119

Open these records in search →

Critical	9
High	11
Medium	49
Low	7
No CVSS	0