EIP-2026-116632

This exploit demonstrates a stack-based buffer overflow in the Yahoo! CD Player ActiveX control by passing an overly long string to the 'open' method, leading to arbitrary code execution or denial-of-service. The PoC uses VBScript to trigger the vulnerability via the ActiveX control's CLSID.