CVE-2008-0623

Yahoo Music Jukebox - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.

Exploits (4)

exploitdb WORKING POC VERIFIED
by h07 · htmldoswindows
https://www.exploit-db.com/exploits/5043
exploitdb WORKING POC VERIFIED
by anonymous · phpremotewindows
https://www.exploit-db.com/exploits/5046
exploitdb WORKING POC VERIFIED
by exceed · htmlremotewindows
https://www.exploit-db.com/exploits/5048
exploitdb WORKING POC
htmlremotewindows
https://www.exploit-db.com/exploits/5051

Scores

EPSS 0.3719
EPSS Percentile 97.1%

Classification

CWE
CWE-119
Status draft

Affected Products (1)

yahoo/music_jukebox

Timeline

Published Feb 06, 2008
Tracked Since Feb 18, 2026