{"uuid": "7c980850-5370-4751-b1db-aab9048e56f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3147", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/yahoomessenger_server.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in the Yahoo! Webcam Upload ActiveX\\n          Control (ywcupl.dll) provided by Yahoo! Messenger version 8.1.0.249.\\n          By sending an overly long string to the \\\"Server()\\\" method, and then calling\\n          the \\\"Send()\\\" method, an attacker may be able to execute arbitrary code.\\n          Using the payloads \\\"windows/shell_bind_tcp\\\" and \\\"windows/shell_reverse_tcp\\\"\\n          yield for the best results.\", \"disclosure_date\": \"2007-06-05\", \"fullname\": \"exploit/windows/browser/yahoomessenger_server\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Yahoo! Messenger 8.1.0.249 ActiveX Control Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/yahoomessenger_server.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/browser/yahoomessenger_server\", \"references\": [\"CVE-2007-3147\", \"OSVDB-37082\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP SP0/SP1 Pro English\", \"Windows 2000 Pro English All\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:17.300685Z"}