EIP-2026-116634
PRE-CVEYahoo! Messenger 5.6 - 'YInsthelper.dll' Multiple Buffer Overflow Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-116634. PoCs published by Rafel Ivgi The-Insider.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in Yahoo! Messenger COM objects (YInstHelper.YInstStarter.1 and YInstHelper.YSearchSetting2) by assigning excessively long strings to properties like AppId, DesktopIcon, and Test. The PoC uses JavaScript to trigger the overflow, potentially leading to remote code execution or denial of service.
Description
Yahoo! Messenger 5.6 - 'YInsthelper.dll' Multiple Buffer Overflow Vulnerabilities
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in Yahoo! Messenger COM objects (YInstHelper.YInstStarter.1 and YInstHelper.YSearchSetting2) by assigning excessively long strings to properties like AppId, DesktopIcon, and Test. The PoC uses JavaScript to trigger the overflow, potentially leading to remote code execution or denial of service.