critical10.0Public exploit code
CVE-2003-1339
Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a deni…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Eznet 3.5.0 - Remote Stack Overflow Universal2003-12-18 · remote · windows · Verified
- Eznet 3.5.0 - Remote Stack Overflow / Denial of Service2003-12-15 · remote · windows · Verified
Impact
Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ezmeeting | Ezmeeting | Versions 3.3, 3.4, 3.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107090390002654&w=2
- http://seclists.org/bugtraq/2003/Dec/0195.html
- http://securitytracker.com/id?1008412
- http://www.governmentsecurity.org/archive/t5390.html
- https://www.exploit-db.com/exploits/133
- http://marc.info/?l=bugtraq&m=107090390002654&w=2
- http://seclists.org/bugtraq/2003/Dec/0195.html
- http://securitytracker.com/id?1008412
- http://www.governmentsecurity.org/archive/t5390.html
- https://www.exploit-db.com/exploits/133