Back to CVE Browser

CVE-2003-1090

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0390%

EPSS Percentile36.29th

PublishedFeb 6, 2003

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

Affected Platforms (CPE)

📦

Celestial Software

Absolutetelnet

= 2.0

📦

Celestial Software

Absolutetelnet

= 2.11

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=104454984001076&w=2

🔗 http://www.kb.cert.org/vuls/id/666073

🔗 http://www.osvdb.org/16024

🔗 http://www.securityfocus.com/bid/6785

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/11265

🔗 http://marc.info/?l=bugtraq&m=104454984001076&w=2

🔗 http://www.kb.cert.org/vuls/id/666073

🔗 http://www.osvdb.org/16024

Related Vulnerabilities

CVE-2020-371646.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying ...

CVE-2020-371656.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying ...

CVE-2020-371666.2

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to cr...

CVE-2021-477645.5

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulati...