CVE-2002-2385: Hotfoon Corporation Hotfoon

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.

Affected products

• Hotfoon Corporation Hotfoon: version 4.0 only

Published 2002-12-31. Last modified 2026-06-16.