CVE-2007-3147
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo!...
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
- Record
CVE-2007-3147- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
- Record
CVE-2007-3147- Updated
- 2026-11-02
EUVDEUVD-2007-3139 No score
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2007-3139- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-55v5-p5xp-vc55 No score
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo!...
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information.
- Record
GHSA-55v5-p5xp-vc55- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Yahoo! Messenger 8.1.0.249 - ActiveX Control Buffer Overflow (Metasploit) | 2010-06-15 |
| Exploit-DB | Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow | 2007-06-07 |
| Exploit-DB | Yahoo! Messenger Webcam 8.1 - 'Ywcupl.dll' Download / Execute | 2007-06-08 |
| Metasploit | Yahoo! Messenger 8.1.0.249 ActiveX Control Buffer Overflow | 2007-06-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, Metasploit | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3147 is a high vulnerability (CVSS 9.3) in Yahoo Messenger, published June 11, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 40.2%, the 98th percentile. No source names a fixed version.
References
lists.grok.org.uk/pipermail/full-disclosure/2007-June/063817.html
exploit-db.com/exploits/4042
securityfocus.com/bid/24354
research.eeye.com/html/advisories/upcoming/20070605.html
kb.cert.org/vuls/id/949817
messenger.yahoo.com/security_update.php?id=060707
Show 11 moreShow less
vupen.com/english/advisories/2007/2094
secunia.com/advisories/25547
securitytracker.com/id?1018204
exchange.xforce.ibmcloud.com/vulnerabilities/34758
securitytracker.com/id?1018203
securityreason.com/securityalert/2809
nvd.nist.gov/vuln/detail/CVE-2007-3147
github.com/advisories/GHSA-55v5-p5xp-vc55