[Osiris]

Secunia has found vulnerabilities in Yahoo! Music Jukebox, which can be exploited by hackers to compromise a user’s system.

1) A boundary error in the YMP DataGrid ActiveX control (datagrid.dll) when handling arguments passed to the “AddImage()” and “AddButton()” methods can be exploited to cause a stack-based buffer overflow via an overly long argument. 2) A boundary error in the Yahoo! Mediagrid ActiveX control (mediagridax.dll) when handling arguments passed to the “AddBitmap()” method can be exploited to cause a stack-based buffer overflow via an overly long argument.

Yahoo Music Jukebox Extremely Critical Flaw :