Both flaws are based around the Yahoo Webcam facilities within the software. The problems occur in the 'ywcupl.dll' file that deals with the Webcam Upload, and the 'ywcvwr.dll' file which handles the Webcam Viewer.
Both ActiveX controls can be exploited to cause a stack-based buffer overflow by assigning an overly long string to the Server property and then using the 'Send()' or 'Receive()' actions.
A successful execution of the exploits could allow arbitrary code to be run on the affected machine.
Security firm Secunia rated the flaws at its highest 'extremely critical' level, and said that the problems can be blocked by changing the kill-bit settings for the affected ActiveX controls.
.png&h=140&w=231&c=1&s=0)
_page-0001.jpg&w=100&c=1&s=0)
Forrester's Technology & Innovation Summit APAC 2025
Local Government Focus Day Western Australia
Digital Leadership Day Western Australia
Government Cyber Security Showcase Western Australia
Government Innovation Showcase Western Australia
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
