9.3

CVE-2008-2111

The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Yahoo ≫ Yahoo Assistant Version <= 3.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.39% 0.916
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/30115
http://secway.org/advisory/AD20080506EN.txt
http://www.securityfocus.com/bid/29065
http://www.securitytracker.com/id?1020004
http://www.vupen.com/english/advisories/2008/1471/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42233