CVE-2002-0320

Name: CVE-2002-0320
Creator: NVD / NIST
Published: 2002-06-25T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 6.96%

Last modified Jun 16, 2026

CVE-2002-0320 is a vulnerability of currently unknown severity. Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.. EPSS estimates a 6.96% chance of exploitation in the next 30 days.

Description

Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.

Metrics

EPSS Probability

6.96%

93.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Yahoo	Messenger	5.0

References

http://marc.info/?l=bugtraq&m=101439616623230&w=2
http://www.cert.org/advisories/CA-2002-16.htmlUS Government Resource
http://www.iss.net/security_center/static/8264.phpPatch, Vendor Advisory
http://www.iss.net/security_center/static/8265.phpPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/419419US Government Resource
http://www.kb.cert.org/vuls/id/887319US Government Resource
http://www.securityfocus.com/bid/4162
http://www.securityfocus.com/bid/4163
http://marc.info/?l=bugtraq&m=101439616623230&w=2
http://www.cert.org/advisories/CA-2002-16.htmlUS Government Resource
http://www.iss.net/security_center/static/8264.phpPatch, Vendor Advisory
http://www.iss.net/security_center/static/8265.phpPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/419419US Government Resource
http://www.kb.cert.org/vuls/id/887319US Government Resource
http://www.securityfocus.com/bid/4162
http://www.securityfocus.com/bid/4163

Timeline

Published: Jun 25, 2002
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2002-0320?

Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.

How severe is CVE-2002-0320?

Severity scoring for CVE-2002-0320 is pending analysis. The EPSS model estimates a 6.96% probability of exploitation in the next 30 days.

How do I fix CVE-2002-0320?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2002-0320?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST