Yahoo! Music Jukebox is a media player made available for Windows-based
systems. Multiple buffer overflow vulnerabilities exist in the ActiveX
controls bundled with this application. A remote attack can exploit these
vulnerabilities by enticing the target user to open a crafted webpage,
potentially causing arbitrary code to be injected and executed in the security
context of the current user.