Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2002-0370
HistoryOct 10, 2002 - 4:00 a.m.

CVE-2002-0370

2002-10-1004:00:00
[email protected]
web.nvd.nist.gov
1036
cve-2002-0370
buffer overflow
dos attack
arbitrary code execution
zip files vulnerability.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

Affected configurations

NVD
Node
allume_systems_divisionstuffit_expanderMatch6.5.2
OR
ibmlotus_notesRange≤4.5
OR
ibmlotus_notesMatch5.0
OR
ibmlotus_notesMatch5.0.1
OR
ibmlotus_notesMatch5.0.2
OR
ibmlotus_notesMatch5.0.3
OR
ibmlotus_notesMatch5.0.4
OR
ibmlotus_notesMatch5.0.5
OR
ibmlotus_notesMatch5.0.9a
OR
ibmlotus_notesMatch5.0.10
OR
ibmlotus_notesMatch5.0.11
OR
ibmlotus_notesMatchr5
OR
ibmlotus_notesMatchr6
OR
veritykeyview_viewing_sdkMatchgold
OR
winzipwinzipMatch7.0
Node
microsoftwindows_98_plus_pack
OR
microsoftwindows_me
OR
microsoftwindows_xphome
OR
microsoftwindows_xpgoldprofessional
OR
microsoftwindows_xpsp1home

Related

cert 1
securityvulns 1
nvd 1
cvelist 1
openvas 2
nessus 1
cert
cert
ZIP archives containing files with large filenames can cause buffer overflows
2002-10-02 00:00:00
securityvulns
securityvulns
R7-0004: Multiple Vendor Long ZIP Entry Filename Processing
2002-10-11 00:00:00
nvd
nvd
CVE-2002-0370
2002-10-10 04:00:00
cvelist
cvelist
CVE-2002-0370
2002-10-05 04:00:00
openvas
openvas
Unchecked Buffer in Decompression Functions(Q329048)
2005-11-03 00:00:00
Microsoft Windows Unchecked Buffer in Decompression Functions (Q329048)
2005-11-03 00:00:00
nessus
nessus
MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (329048)
2002-10-24 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON
Related for CVE-2002-0370
cert1securityvulns1nvd1cvelist1openvas2nessus1