CVE-2009-4171

This exploit leverages a buffer overflow vulnerability in the ActiveX control (clsid:58916BE6-BAFF-4F33-AEFE-B2AA03FE4C86) by passing an overly long string to the RegisterMe method, leading to remote code execution.

This exploit triggers a NULL-pointer dereference in Yahoo! Messenger's ActiveX control via a crafted VBScript call, leading to a denial-of-service (DoS) condition. The PoC uses an XML package with a VBScript job to pass an overly long string argument to the vulnerable method.