CVE-2003-1129

CVE-2003-1129 describes a buffer overflow vulnerability in the Yahoo! Audio Conferencing ActiveX control (versions prior to 1.0.0.45), impacting Yahoo! Messenger and Yahoo! Chat. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code by supplying a URL with an excessively long hostname. While the CVSS score is low (2.6), indicating difficult exploitation and only partial availability impact, its FAUCET Risk Score is high (93/100) and EPSS score is above average, suggesting a higher than typical exploitability. Although not listed in CISA's KEV catalog, an ExploitDB entry exists (EDB-22593) for a remote buffer overflow, yet there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.