CVE-2003-1135: Buffer Overflow
Published Dec 31, 2003
·Updated
Buffer overflow in Yahoo! Messenger 5.6 allows remote attackers to cause a denial of service (crash) via a file send request (sendfile) with a large number of "%" (percent) characters after the Yahoo ID.
Affected Software
1 affected component
Yahoo Messenger=5.6
Event History
Dec 31, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
May 10, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-1135?
CVE-2003-1135 is classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2003-1135?
To mitigate CVE-2003-1135, users should upgrade to a version of Yahoo! Messenger that is not affected by this buffer overflow issue.
3
Who is affected by CVE-2003-1135?
CVE-2003-1135 affects users of Yahoo! Messenger version 5.6.
4
What is the impact of CVE-2003-1135?
The impact of CVE-2003-1135 is that it can lead to crashes or denial of service when a particular file send request is exploited.
5
Is CVE-2003-1135 exploitable remotely?
Yes, CVE-2003-1135 can be exploited remotely through a crafted file send request.