CVE-2002-0031

Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.94% chance of exploitation in the next 30 days, 92nd percentile

Published

2002-06-11

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/21484
• https://www.exploit-db.com/exploits/45

Security advisories

• http://online.securityfocus.com/archive/1/274223
• http://www.securityfocus.com/bid/4837
• http://www.cert.org/advisories/CA-2002-16.html
• http://www.kb.cert.org/vuls/id/137115

References

• CVE Record
• NVD entry