Some vulnerabilities have been discovered in Yahoo! Music Jukebox, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the YMP DataGrid ActiveX control (datagrid.dll) when handling arguments passed to the "AddImage()" and "AddButton()" methods can be exploited to cause a stack-based buffer overflow via an overly long argument.

2) A boundary error in the Yahoo! Mediagrid ActiveX control (mediagridax.dll) when handling arguments passed to the "AddBitmap()" method can be exploited to cause a stack-based buffer overflow via an overly long argument.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

NOTE: Working exploit code is publicly available.

The vulnerabilities are confirmed in Yahoo! Music Jukebox version 2.2.2.056. Other versions may also be affected.

Solution
Update to the latest version.
Further details available in Customer Area

Provided and/or discovered by
1) Krystian Kloskowski (h07)
* Additional information provided by Elazar Broad.

2) Elazar Broad

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/5043
http://milw0rm.com/exploits/5051
http://milw0rm.com/exploits/5052

Yahoo!:
http://help.yahoo.com/l/us/yahoo/music/jukebox/troubleshoot/securityupdate.html

MS08-023 (948881):
http://www.microsoft.com/technet/security/Bulletin/MS08-023.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area