CVE-2007-1680: Yahoo Messenger

High severity, CVSS 9.3. EPSS: 8.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger before 20070313 allows remote attackers to execute arbitrary code via long (1) socksHostname and (2) hostname properties.

Affected products

• Yahoo Messenger: version 8.0 only; version 8.0.0.863 only; version 8.0_2005.1.1.4 only; version 8.1.0.209 only; version 8.1.0.239 only

Published 2007-04-06. Last modified 2026-06-16.