返回 CVE 浏览器

CVE-2003-1339

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0210%

EPSS Percentile15.96th

Published2003年12月31日

Last Modified2026年4月16日

Vulnerability Description

Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll.

Affected Platforms (CPE)

📦

Ezmeeting

Ezmeeting

= 3.3

📦

Ezmeeting

Ezmeeting

= 3.4

📦

Ezmeeting

Ezmeeting

= 3.5

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107090390002654&w=2

🔗 http://seclists.org/bugtraq/2003/Dec/0195.html

🔗 http://securitytracker.com/id?1008412

🔗 http://www.governmentsecurity.org/archive/t5390.html

🔗 https://www.exploit-db.com/exploits/133

🔗 http://marc.info/?l=bugtraq&m=107090390002654&w=2

🔗 http://seclists.org/bugtraq/2003/Dec/0195.html

🔗 http://securitytracker.com/id?1008412

相关漏洞威胁

CVE-2003-009510.0

Buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote attackers to execute arbitrary cod...

CVE-2003-019610.0

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2003-071510.0

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers...

CVE-2003-009810.0

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly...