Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2002-0370

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

Published

2002-10-10T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application allume_systems_division stuffit_expander 6.5.2 Yes
Application ibm lotus_notes ≤ 4.5 Yes
Application ibm lotus_notes 5.0 Yes
Application ibm lotus_notes 5.0.1 Yes
Application ibm lotus_notes 5.0.2 Yes
Application ibm lotus_notes 5.0.3 Yes
Application ibm lotus_notes 5.0.4 Yes
Application ibm lotus_notes 5.0.5 Yes
Application ibm lotus_notes 5.0.9a Yes
Application ibm lotus_notes 5.0.10 Yes
Application ibm lotus_notes 5.0.11 Yes
Application ibm lotus_notes r5 Yes
Application ibm lotus_notes r6 Yes
Application verity keyview_viewing_sdk gold Yes
Application winzip winzip 7.0 Yes
Application microsoft windows_98_plus_pack * Yes
Operating System microsoft windows_me * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
References