Lucene search

K
cve[email protected]CVE-2003-1339
HistorySep 23, 2007 - 11:00 p.m.

CVE-2003-1339

2007-09-2323:00:00
CWE-119
web.nvd.nist.gov
27
cve-2003-1339
buffer overflow
eznet.exe
denial of service
execute arbitrary code
swezmodule.dll

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.144 Low

EPSS

Percentile

95.8%

Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, © eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll.

Affected configurations

NVD
Node
ezmeetingezmeetingMatch3.3
OR
ezmeetingezmeetingMatch3.4
OR
ezmeetingezmeetingMatch3.5

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.144 Low

EPSS

Percentile

95.8%

Related for CVE-2003-1339