CVE-2007-1680

no score yetEPSS 8.4%

yahoo messenger: no CVSS score yet. EPSS 8.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties.

EPSS: 8.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2007-04-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

yahoo:messenger

References

http://messenger.yahoo.com/security_update.php?id=031207
http://osvdb.org/34319
http://secunia.com/advisories/24742
http://securityreason.com/securityalert/2523
http://www.kb.cert.org/vuls/id/388377

Check your stack JSON