CVE-2003-1118

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16

Description

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitrary code via a spoofed server response containing a long string followed by a \n (newline) character.

Affected products

University Of California Seti At Home: 3.3, 3.4, 3.5, 3.6, 3.7

References

http://lists.grok.org.uk/pipermail/full-disclosure/2003-April/004383.html
http://www.kb.cert.org/vuls/id/146785
http://www.securityfocus.com/bid/7292
https://exchange.xforce.ibmcloud.com/vulnerabilities/11731
http://lists.grok.org.uk/pipermail/full-disclosure/2003-April/004383.html
http://www.kb.cert.org/vuls/id/146785
http://www.securityfocus.com/bid/7292
https://exchange.xforce.ibmcloud.com/vulnerabilities/11731

Get alerted when CVE-2003-1118 or the next vulnerability affects your stack