Lucene search

K
cve[email protected]CVE-2002-2224
HistoryFeb 27, 2007 - 2:00 a.m.

CVE-2002-2224

2007-02-2702:00:00
web.nvd.nist.gov
20
cve-2002-2224
pgpfreeware
buffer overflow
windows nt
denial of service
arbitrary code
internet key exchange
nvd

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.

Affected configurations

NVD
Node
network_associatespgp_freewareMatch7.03

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.032 Low

EPSS

Percentile

91.2%

Related for CVE-2002-2224