CVE-2009-4171
Yahoo! Messenger 9.0.0.2162 - Denial of Service via YahooBridgeLib.dll RegisterMe Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-4171. PoCs published by HACKATTACK.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in the ActiveX control (clsid:58916BE6-BAFF-4F33-AEFE-B2AA03FE4C86) by passing an overly long string to the RegisterMe method, leading to remote code execution.
Description
An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by calling the RegisterMe method with a long argument.
Exploits (2)
This exploit leverages a buffer overflow vulnerability in the ActiveX control (clsid:58916BE6-BAFF-4F33-AEFE-B2AA03FE4C86) by passing an overly long string to the RegisterMe method, leading to remote code execution.
This exploit triggers a NULL-pointer dereference in Yahoo! Messenger's ActiveX control via a crafted VBScript call, leading to a denial-of-service (DoS) condition. The PoC uses an XML package with a VBScript job to pass an overly long string argument to the vulnerable method.