CVE-2003-1339 Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrar...
HighCVSS 10.0
EPSS 48.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ezmeeting | = 3.3 | No fix listed |
| ezmeeting | = 3.4 | No fix listed |
| ezmeeting | = 3.5 | No fix listed |
References
- 20031207 eZ Multiple Packages Stack Overflow Vulnerability mailing-list
- 20031211 eZ and eZphotoshare fixes mailing-list
- 1008412 exploit vdb-entry
- www.governmentsecurity.org
- 133 exploit