PT-2002-1389 · Yahoo · Yahoo! Messenger

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0320

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Yahoo! Messenger version 5.0

Description A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long message or IMvironment field.

Recommendations For Yahoo! Messenger version 5.0, update to a newer version that contains a fix for this issue to prevent potential exploitation.

Fix

Related Identifiers

CVE-2002-0320

Affected Products

Yahoo! Messenger

References · 9

• http://iss.net/security_center/static/8265.php · Vendor Advisory
• http://iss.net/security_center/static/8264.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0320 · Security Note
• http://securityfocus.com/bid/4162 · Note
• http://marc.info/?l=bugtraq&m=101439616623230&w=2 · Note
• http://kb.cert.org/vuls/id/887319 · Note
• http://cert.org/advisories/CA-2002-16.html · Note
• http://securityfocus.com/bid/4163 · Note
• http://kb.cert.org/vuls/id/419419 · Note