CVE-2003-1129 Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL wit...
LowCVSS 2.6
EPSS 8.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo audio conferencing activex control | = 1.0.0.43 | No fix listed |
References
- help.yahoo.com
- 8924 patch third-party-advisory
- VU#272644 third-party-advisory us-government-resource
- 20030530 Yahoo! Security Advisory: Yahoo! Voice Chat mailing-list patch
- 7561 vdb-entry
- yahoo-audio-bo(12130) vdb-entry