CVE-2000-0047: Buffer Overflow
Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
At network/messaging gateways or mail/proxies, filter or block messages that contain excessively long URLs or strip/limit URL length before delivering to Yahoo Pager clients to prevent triggering the overflow.
- Operational
Advise users to avoid opening or clicking URLs in messages from untrusted sources and to not open messages that contain unusually long URLs until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0047?
CVE-2000-0047 is classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2000-0047?
To fix CVE-2000-0047, users should update the Yahoo Pager to the latest version available.
What type of attack does CVE-2000-0047 involve?
CVE-2000-0047 involves a buffer overflow attack triggered by sending a long URL within a message.
Which software versions are affected by CVE-2000-0047?
CVE-2000-0047 specifically affects Yahoo Pager version 733.
Can CVE-2000-0047 be exploited remotely?
Yes, CVE-2000-0047 can be exploited remotely, allowing attackers to send crafted messages to trigger the vulnerability.