CVE-2002-0314: Fasttrack Kazaa

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustion) via a series of client-to-client messages, which pops up new windows per message.

Affected products

• Fasttrack Kazaa: version 1.2 only; version 1.3 only; version 1.3.3 only; version 1.4 only
• Grokster Grokster: version 1.3 only; version 1.3.3 only
• Music City Networks Morpheus: version 1.3 only; version 1.3.3 only

Published 2002-06-25. Last modified 2026-06-16.