CVE-2002-0031

Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.94% chance of exploitation in the next 30 days, 92th percentile

Published

2002-06-11

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/21484
• https://www.exploit-db.com/exploits/45

References

• CVE Record
• NVD entry

Related

• CVE-2002-0023
• CVE-2002-0033
• CVE-2002-0022
• CVE-2002-0043
• CVE-2002-0013
• CVE-2002-0048