Buffer overflow in Ezmeeting

CVE-2003-1339

Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attackers to cause a denial of service (crash) or execute arbitrary code, as demonstrated via (1) a long GET request and (2) a long operation or autologin parameter to SwEzModule.dll.

Vulnerability class: Buffer Overflow

EPSS: 0.486 (98.8th percentile) — read the EPSS interpretation.

Affected products

  • Ezmeeting — versions 3.3, 3.4, 3.5
  • N/a — versions n/a

Weakness classification (CWE)

References