[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU4oRxgpMbZu8ghQTZD8EBwHQGEXd-c2FHSdeEjqeNM0":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":92,"kevVulnerabilities":145,"topProductsByCves":146,"seoMetadata":157,"meta":166},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":91},36262,"yahoo",17,66,0,254,"2019-12-26","y",[16,22,28,33,39,44,49,53,57,61,65,69,73,77,80,84,88],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},174565,"messenger",82,33,"2015-09-11",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},174576,"yui",37,12,"2013-11-13",{"id":29,"product_name":30,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":32},174568,"toolbar",5,"2017-07-17",{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},174566,"music_jukebox",2,3,"2008-02-06",{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":11,"last_cve_update":43},174574,"yahoo\\!_browser",6,"2013-06-03",{"id":45,"product_name":46,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":48},174567,"pager",1,"1999-10-01",{"id":50,"product_name":51,"version_count":52,"cve_count":47,"kev_count":11,"last_cve_update":13},174560,"athenz",112,{"id":54,"product_name":55,"version_count":36,"cve_count":47,"kev_count":11,"last_cve_update":56},174569,"tumblr","2013-07-18",{"id":58,"product_name":59,"version_count":11,"cve_count":47,"kev_count":11,"last_cve_update":60},174570,"ui_library","2007-04-30",{"id":62,"product_name":63,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":64},174571,"widgets","2007-07-27",{"id":66,"product_name":67,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":68},174572,"yafuoku\\!","2013-08-21",{"id":70,"product_name":71,"version_count":11,"cve_count":47,"kev_count":11,"last_cve_update":72},174573,"yahoo_assistant","2008-05-07",{"id":74,"product_name":75,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":76},174561,"audio_conferencing_activex_control","2003-12-31",{"id":78,"product_name":79,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":68},174564,"japan_shopping",{"id":81,"product_name":82,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":83},174575,"yahoo_ybox","2014-09-11",{"id":85,"product_name":86,"version_count":47,"cve_count":11,"kev_count":11,"last_cve_update":87},174563,"desktop_login",null,{"id":89,"product_name":90,"version_count":47,"cve_count":11,"kev_count":11,"last_cve_update":87},174562,"autosync","Yahoo is a technology vendor with 17 tracked products and 66 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[93,102,107,111,115,120,126,131,137,141],{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":100,"epssScore":101},"CVE-2007-3147","Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method.  NOTE: some of these details are obtained from third party information.","2007-06-11",9.3,"v2","Critical",false,0.40229,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":100,"epssScore":106},"CVE-2007-4515","Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1.0.419 allows remote attackers to execute arbitrary code via unspecified vectors involving arguments to the (1) fvCom and (2) info methods.  NOTE: some of these details are obtained from third party information.","2007-08-31",0.33011,{"cveId":108,"description":109,"publishedDate":64,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":100,"epssScore":110},"CVE-2007-4034","Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (20070620) in YDPCTL.dll in Yahoo! Widgets before 4.0.5 allows remote attackers to execute arbitrary code via a long argument to the GetComponentVersion method.  NOTE: some of these details are obtained from third party information.",0.1296,{"cveId":112,"description":113,"publishedDate":96,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":100,"epssScore":114},"CVE-2007-3148","Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method.",0.12339,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":100,"epssScore":119},"CVE-2007-4391","Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an \"invite to view my webcam\" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted.","2007-08-17",0.09314,{"cveId":121,"description":122,"publishedDate":38,"cvssScore":123,"cvssVersion":98,"severity":124,"isKev":100,"epssScore":125},"CVE-2008-0623","Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to execute arbitrary code via a long argument to the AddImage method.",4.3,"Medium",0.09151,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":97,"cvssVersion":98,"severity":99,"isKev":100,"epssScore":130},"CVE-2007-1680","Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties.","2007-04-06",0.08375,{"cveId":132,"description":133,"publishedDate":76,"cvssScore":134,"cvssVersion":98,"severity":135,"isKev":100,"epssScore":136},"CVE-2003-1129","Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat.",2.6,"Low",0.08344,{"cveId":138,"description":139,"publishedDate":38,"cvssScore":123,"cvssVersion":98,"severity":124,"isKev":100,"epssScore":140},"CVE-2008-0625","Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddBitmap method.",0.08104,{"cveId":142,"description":143,"publishedDate":38,"cvssScore":123,"cvssVersion":98,"severity":124,"isKev":100,"epssScore":144},"CVE-2008-0624","Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary code via a long argument to the AddButton method, a different vulnerability than CVE-2008-0623.",0.07595,[],[147,148,149,150,151,152,153,154,155,156],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":11,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":11,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":48},{"id":50,"product_name":51,"version_count":52,"cve_count":47,"kev_count":11,"last_cve_update":13},{"id":54,"product_name":55,"version_count":36,"cve_count":47,"kev_count":11,"last_cve_update":56},{"id":58,"product_name":59,"version_count":11,"cve_count":47,"kev_count":11,"last_cve_update":60},{"id":62,"product_name":63,"version_count":47,"cve_count":47,"kev_count":11,"last_cve_update":64},{"title":158,"metaDescription":159,"keywords":160,"structuredData":161},"Yahoo - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Yahoo covering 17 products with 66 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Yahoo vulnerabilities, Yahoo security, Yahoo CVE, Yahoo threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":162,"@type":163,"name":164,"description":159,"url":165},"https:\u002F\u002Fschema.org","Organization","Yahoo","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fyahoo",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":167,"apiVersion":168},"2026-10-19T18:38:37.305Z","3.0"]