Skip to content

CVE-2003-1090

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary...

10.0 HighPublic exploit

CVE-2003-1090 is a high vulnerability (CVSS 10.0) in Celestial Software Absolutetelnet, published February 6, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.6%, the 96th percentile. No source names a fixed version.

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

Exploit likelihood

11.6%Up 3.9 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

Record: CVE-2003-1090
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

Record: CVE-2003-1090
Updated: 2026-11-02

EUVDEUVD-2003-1080 No score

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

Record: EUVD-2003-1080
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3hx8-6m94-fm2x No score

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary...

Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.

Record: GHSA-3hx8-6m94-fm2x
Updated: 2026-11-02

Affected products

celestial software absolutetelnet

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Celestial Software AbsoluteTelnet 2.0/2.11 - Title Bar Buffer Overflow	2003-02-06

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References