Hotfoon Corporation Hotfoon vulnerabilities

CVE-2002-2385 [HIGH] CWE-119 CVE-2002-2385: Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.

CVE-2002-2384 [LOW] CWE-255 CVE-2002-2384: hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry k hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.