CVE-2002-0370
High
Description
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Allume Systems Division Stuffit Expander
PublishedOct 10, 2002
First seenOct 10, 2002
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| allume_systems_division stuffit_expander | 6.5.2 | — |
| ibm lotus_notes | v ≤ 4.5, 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.9a, 5.0.10, 5.0.11, r5, r6 | — |
| verity keyview_viewing_sdk | gold | — |
| winzip winzip | 7.0 | — |
| microsoft windows_98_plus_pack | No range specified | — |
| microsoft windows_me | No range specified | — |
| microsoft windows_xp | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.