Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.
📦
music_jukebox
Vendor: yahoo
Actively Exploited
0
CISA KEV List
PoC / Exploits
3
Code Available
Total RCEs
0
Remote Access
Total CVEs
6
Total Indexed
Avg. EPSS
8.28%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
4.3
CVSS
CVE-2008-0623
Exploit Found
Severity: MEDIUM
4.3
CVSS
CVE-2008-0624
Exploit Found
Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.
Severity: MEDIUM
4.3
CVSS
CVE-2008-0625
Exploit Found
Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method.
Severity: MEDIUM