CVE-2002-0031

Опубликовано: 26 июл. 2002

Источник: nvd

CVSS2: 4.6

EPSS Средний

Описание

Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.

Ссылки

http://online.securityfocus.com/archive/1/274223
Vendor Advisory
http://www.cert.org/advisories/CA-2002-16.html
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/137115
US Government Resource
http://www.securityfocus.com/bid/4837
Patch
Vendor Advisory
http://online.securityfocus.com/archive/1/274223
Vendor Advisory
http://www.cert.org/advisories/CA-2002-16.html
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/137115
US Government Resource
http://www.securityfocus.com/bid/4837
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.21415

Средний

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-h292-wpw4-4xhf

github

больше 3 лет назад