CVE-2003-1129

BASSO 2.6CVE-2003-1129 · Published 31/12/2003 · updated 16/06/2026

In breve

CVE-2003-1129 è una vulnerabilità BASSO (CVSS 2.6) che riguarda audio conferencing activex control (yahoo).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.3%, superiore al 95.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
audio conferencing activex control yahoo	`= 1.0.0.43`	No fix yet

Description

Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a URL with a long hostname to Yahoo! Messenger or Yahoo! Chat.

References

help.yahoo.com/help/us/mesg/use/use-45.html
secunia.com/advisories/8924 · Patch
kb.cert.org/vuls/id/272644 · Third Party Advisory
securityfocus.com/archive/1/323439 · Patch
securityfocus.com/bid/7561
exchange.xforce.ibmcloud.com/vulnerabilities/12130

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free