Description
Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Yahoo! Messenger 8.1.0.413 - 'webcam' Remote Crash EDB-4335 · dos · Aug 29, 2007 · verified
- Yahoo! Messenger 8.1 - 'KDU_V32M.DLL' Remote Denial of Service EDB-30500 · dos · Aug 15, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2007-2917 vdb-entry
- yahoo-messenger-webcam-bo(36115) vdb-entry
- VU#515968 third-party-advisory
- http://www.avertlabs.com/research/blog/index.php/2007/08/15/more-on-the-yahoo-messenger-webcam-0day/
- http://www.team509.com/expyahoo.rar
- 26501 third-party-advisory
- 25330 vdb-entry
- 38221 vdb-entry
- 1018586 vdb-entry
- https://www.xfocus.net/bbs/index.php?act=ST&f=2&t=64639&page=1#entry321749