[Released Date] 06.14.2007 [Title] Yahoo Messenger Webcam ActiveX Exploit Update [Vulnerabilty] CVE-2007-3148 [Category] Exploits/Client Side [Platform] Windows [Description] 
This update adds support for Windows Vista. This module exploits a vulnerability in the Yahoo Messenger Webcam 8.1 ActiveX Control (ywcvwr.dll). When the Receive() method processes a long string argument, a stack based buffer overflow occurs allowing execution of arbitrary code. This exploit is triggered when an unsuspecting user is lured into visiting a malicious web-site hosted by CORE IMPACT.