Lucene search

[email protected]CVE-2002-0152

HistoryJun 25, 2002 - 4:00 a.m.

CVE-2002-0152

2002-06-2504:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0152

microsoft

macintosh

buffer overflow

remote attack

denial of service

arbitrary code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.

Affected configurations

NVD

Node

microsoftentourageMatch2001macos

microsoftentourageMatchv._xmacos

microsoftexcelMatch2001mac_os_x

microsoftexcelMatchxmac_os_x

microsoftieMatch5.1mac_os

microsoftofficeMatch2001macos

microsoftofficeMatch2001sr1mac_os

microsoftofficeMatchv.xmac

microsoftoutlook_expressMatch5.0macos

microsoftoutlook_expressMatch5.0.1macos

microsoftoutlook_expressMatch5.0.2macos

microsoftoutlook_expressMatch5.0.3macos

microsoftpowerpointMatch98macos

microsoftpowerpointMatch2001macos

microsoftpowerpointMatchv.xmacos

CPENameOperatorVersion
microsoft:entouragemicrosoft entourageeq2001
microsoft:entouragemicrosoft entourageeqv._x
microsoft:excelmicrosoft exceleq2001
microsoft:excelmicrosoft exceleqx
microsoft:iemicrosoft ieeq5.1
microsoft:officemicrosoft officeeq2001
microsoft:officemicrosoft officeeqv.x
microsoft:outlook_expressmicrosoft outlook expresseq5.0
microsoft:outlook_expressmicrosoft outlook expresseq5.0.1
microsoft:outlook_expressmicrosoft outlook expresseq5.0.2

CPE	Name	Operator	Version
microsoft:entourage	microsoft entourage	eq	2001
microsoft:entourage	microsoft entourage	eq	v._x
microsoft:excel	microsoft excel	eq	2001
microsoft:excel	microsoft excel	eq	x
microsoft:ie	microsoft ie	eq	5.1
microsoft:office	microsoft office	eq	2001
microsoft:office	microsoft office	eq	v.x
microsoft:outlook_express	microsoft outlook express	eq	5.0
microsoft:outlook_express	microsoft outlook express	eq	5.0.1
microsoft:outlook_express	microsoft outlook express	eq	5.0.2

Rows per page:

1-10 of 141

References

marc.info/?l=bugtraq&m=101897994314015&w=2

www.iss.net/security_center/static/8850.php

www.osvdb.org/5357

www.securityfocus.com/bid/4517

docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

Related for CVE-2002-0152

nvd1 cvelist1