CVE-2007-4515

Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods. NOTE: some of these details are obtained from third party information.

• CWE-119

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591Patch, Vendor Advisory
• http://messenger.yahoo.com/security_update.php?id=082907Patch
• http://osvdb.org/37739
• http://secunia.com/advisories/26579Patch, Vendor Advisory
• http://securityreason.com/securityalert/3083
• http://securitytracker.com/id?1018628
• http://www.securityfocus.com/bid/25494
• http://www.vupen.com/english/advisories/2007/3011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36363
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=591Patch, Vendor Advisory
• http://messenger.yahoo.com/security_update.php?id=082907Patch
• http://osvdb.org/37739
• http://secunia.com/advisories/26579Patch, Vendor Advisory
• http://securityreason.com/securityalert/3083
• http://securitytracker.com/id?1018628
• http://www.securityfocus.com/bid/25494
• http://www.vupen.com/english/advisories/2007/3011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36363

Published

Aug 31, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4509SQL injection vulnerability in index.php in the EventList co…
• CVE-2007-4510ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.…
• CVE-2007-4511The Sun Admin Console in Sun Application Server 9.0_0.1 does…
• CVE-2007-4512Cross-site scripting (XSS) vulnerability in Sophos Anti-Viru…
• CVE-2007-4513Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3…
• CVE-2007-4514Unspecified vulnerability in HP ProCurve Manager and HP ProC…
• CVE-2007-4516The Volume Manager Scheduler Service (aka VxSchedService.exe…
• CVE-2007-4517Buffer overflow in the XDB.XDB_PITRIG_PKG.PITRIG_DROPMETADAT…
• CVE-2007-4521Asterisk Open Source 1.4.5 through 1.4.11, when configured t…
• CVE-2007-4522Multiple SQL injection vulnerabilities in Ripe Website Manag…
• CVE-2007-4523Multiple cross-site scripting (XSS) vulnerabilities in Ripe …
• CVE-2007-4524PHP remote file inclusion vulnerability in adisplay.php in P…