Vulnerability Name:

CVE-2002-0320 (CCN-8264)

Assigned:2002-02-21
Published:2002-02-21
Updated:2016-10-18
Summary:Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: CCN
Type: BugTraq Mailing List, Thu Feb 21 2002 - 11:03:57 CST
Remote crashes in Yahoo messenger

Source: MITRE
Type: CNA
CVE-2002-0320

Source: BUGTRAQ
Type: UNKNOWN
20020221 Remote crashes in Yahoo messenger

Source: CCN
Type: Yahoo! Messenger Web site
Download Yahoo! Messenger

Source: CCN
Type: CERT Advisory CA-2002-16
Multiple Vulnerabilities in Yahoo! Messenger

Source: CERT
Type: US Government Resource
CA-2002-16

Source: XF
Type: Patch, Vendor Advisory
yahoo-messenger-message-bo(8264)

Source: XF
Type: Patch, Vendor Advisory
yahoo-messenger-imvironment-bo(8265)

Source: CCN
Type: US-CERT VU#419419
Yahoo! Messenger contains buffer overflow in message field

Source: CERT-VN
Type: US Government Resource
VU#419419

Source: CCN
Type: US-CERT VU#887319
Yahoo! Messenger contains buffer overflow in IMvironment field

Source: CERT-VN
Type: US Government Resource
VU#887319

Source: BID
Type: UNKNOWN
4162

Source: CCN
Type: BID-4162
Yahoo! Messenger Message Field Overflow Vulnerability

Source: BID
Type: UNKNOWN
4163

Source: CCN
Type: BID-4163
Yahoo! Messenger IMvironment Field Overflow Vulnerability

Source: XF
Type: UNKNOWN
yahoo-messenger-message-bo(8264)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:yahoo:messenger:5.0:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:yahoo:messenger:5.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Vulnerability Name:

    CVE-2002-0320 (CCN-8265)

    Assigned:2002-02-21
    Published:2002-02-21
    Updated:2016-10-18
    Summary:Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.
    CVSS v3 Severity:6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
    Exploitability Metrics:Attack Vector (AV): Network
    Attack Complexity (AC): Low
    Privileges Required (PR): None
    User Interaction (UI): None
    Scope:Scope (S): Unchanged
    Impact Metrics:Confidentiality (C): None
    Integrity (I): Low
    Availibility (A): Low
    CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
    Exploitability Metrics:Access Vector (AV): Network
    Access Complexity (AC): Low
    Authentication (Au): None
    Impact Metrics:Confidentiality (C): Partial
    Integrity (I): Partial
    Availibility (A): Partial
    6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P)
    Exploitability Metrics:Access Vector (AV): Network
    Access Complexity (AC): Low
    Athentication (Au): None
    Impact Metrics:Confidentiality (C): None
    Integrity (I): Partial
    Availibility (A): Partial
    Vulnerability Type:CWE-Other
    Vulnerability Consequences:Denial of Service
    References:Source: CCN
    Type: BugTraq Mailing List, Thu Feb 21 2002 - 11:03:57 CST
    Remote crashes in Yahoo messenger

    Source: MITRE
    Type: CNA
    CVE-2002-0320

    Source: CCN
    Type: Yahoo! Messenger Web site
    Download Yahoo! Messenger

    Source: CCN
    Type: CERT Advisory CA-2002-16
    Multiple Vulnerabilities in Yahoo! Messenger

    Source: CCN
    Type: US-CERT VU#419419
    Yahoo! Messenger contains buffer overflow in message field

    Source: CCN
    Type: US-CERT VU#887319
    Yahoo! Messenger contains buffer overflow in IMvironment field

    Source: CCN
    Type: BID-4162
    Yahoo! Messenger Message Field Overflow Vulnerability

    Source: CCN
    Type: BID-4163
    Yahoo! Messenger IMvironment Field Overflow Vulnerability

    Source: XF
    Type: UNKNOWN
    yahoo-messenger-imvironment-bo(8265)

    Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:yahoo:messenger:5.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    yahoo messenger 5.0
    yahoo messenger 5.0
    yahoo messenger 5.0