CVE-2008-0624
Yahoo! Music Jukebox 2.2.2.56 - Buffer Overflow via Datagrid ActiveX AddButton Method
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-0624. PoCs published by exceed, anonymous, Elazar.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Yahoo! Music Jukebox 2.2 via the AddImage() method in the ActiveX control. It uses heap spraying to execute shellcode (calc.exe) when the vulnerable method is triggered.
Description
Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.
Exploits (4)
This exploit targets a buffer overflow vulnerability in Yahoo! Music Jukebox 2.2 via the AddImage() method in the ActiveX control. It uses heap spraying to execute shellcode (calc.exe) when the vulnerable method is triggered.
This exploit targets a vulnerability in the Aurigma Image Uploader ActiveX control (CVE-2008-0624) by triggering a heap-based buffer overflow via a maliciously crafted AddImage method call. The exploit uses a heap spray technique to achieve reliable code execution.
This exploit targets a buffer overflow vulnerability in Yahoo! JukeBox's datagrid.dll via the AddButton() method. It uses a heap spray technique to achieve remote code execution by overflowing a buffer with a long string, followed by shellcode execution.
This is a proof-of-concept exploit for a buffer overflow vulnerability in Yahoo! Music Jukebox 2.2. It leverages the AddImage() method in an ActiveX control to trigger a crash via a crafted URL, demonstrating potential for arbitrary code execution.