Unscored severity · published Oct 10, 2002
CVE-2002-0370
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with…
–
CVSS
43.3%
EPSS
No
On KEV
Description
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)43.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KV
Keyview Viewing Sdk · Verity
gold · source: NVD
LN
Lotus Notes · Ibm
through 4.5; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +6 more · source: NVD
SE
Stuffit Expander · Allume Systems Division
6.5.2 · source: NVD
W9
Windows 98 Plus Pack · Microsoft
All versions, or not specified · source: NVD
WM
Windows ME · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
WI
Winzip · Winzip
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0370
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0370
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html
marc.info
http://marc.info/?l=bugtraq&m=103428193409223&w=2
securityreason.com
http://securityreason.com/securityalert/587
www.info-zip.org
http://www.info-zip.org/FAQ.html
www.info.apple.com
http://www.info.apple.com/usen/security/security_updates.html
Vendor Advisory
http://www.iss.net/security_center/static/10251.php