CVE-2002-0031

CVE-2002-0031 describes multiple buffer overflow vulnerabilities in Yahoo! Messenger versions 5.0.0.1064 and earlier. These flaws allow remote attackers to execute arbitrary code by crafting malicious ymsgr URIs with excessively long arguments targeting functions like "call," "sendim," or "chat." The vulnerability has a CVSS score of 4.6, indicating a medium severity, with a local attack vector and low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, and the vulnerability has garnered significant community discussion, suggesting awareness among threat actors.