CVE-2003-1129

Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat.

Affected products

Activex, Yahoo! Audio Conferencing, Yahoo! Messenger

Yahoo Audio Conferencing Activex Control

= 1.0.0.43

Fix

Available

CVSS 2.0

2.6 LOW

EPSS

8.3% (94th percentile)

NVD status

Modified

Published

2005-03-12