CVE-2002-0031

This exploit targets a buffer overflow vulnerability in Yahoo Messenger 5.5 on Windows XP. It crafts a malicious HTML file served via a local web server, which triggers the overflow when the victim opens it, leading to arbitrary code execution (cmd.exe).

This exploit leverages a stack-based buffer overflow in Yahoo! Messenger's 'ymsgr:' URI handler via the 'call' parameter. It crafts a malicious HTML file that, when viewed, triggers arbitrary code execution through shellcode.