medium4.6Public exploit code
CVE-2002-0031
Buffer overflows in Yahoo!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yahoo! Messenger 5.0 - Call Center Buffer Overflow2002-05-27 · remote · windows · Verified
- Yahoo Messenger 5.5 - 'DSR-ducky.c' Remote Overflow2003-06-23 · remote · windows · Verified
Impact
Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yahoo | Messenger | Version 5.0 |
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/274223
- http://www.cert.org/advisories/CA-2002-16.html
- http://www.kb.cert.org/vuls/id/137115
- http://www.securityfocus.com/bid/4837
- http://online.securityfocus.com/archive/1/274223
- http://www.cert.org/advisories/CA-2002-16.html
- http://www.kb.cert.org/vuls/id/137115
- http://www.securityfocus.com/bid/4837