CVE-2004-0043

CVE-2004-0043 describes a buffer overflow vulnerability in Yahoo Instant Messenger versions 5.6.0.1351 and earlier. This flaw allows remote attackers to trigger a denial of service by sending a long filename through the download feature, potentially leading to arbitrary code execution. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation is reported, and community discussion is minimal, the vulnerability's nature suggests a significant risk if exploited.