CVE-2003-1118

CVE-2003-1118 describes a buffer overflow vulnerability in the SETI@home client, specifically version 3.03 and potentially others, developed by the University of California. This flaw allows remote attackers to trigger a denial of service (client crash) or execute arbitrary code by sending a specially crafted, long string followed by a newline character in a spoofed server response. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication or complex attack vectors, and can lead to partial confidentiality, integrity, and availability impacts. While not listed on the CISA KEV catalog or Hot List, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.