7.5

CVE-2002-0370

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Version <= 4.5
Ibm ≫ Lotus Notes Version5.0
Ibm ≫ Lotus Notes Version5.0.1
Ibm ≫ Lotus Notes Version5.0.2
Ibm ≫ Lotus Notes Version5.0.3
Ibm ≫ Lotus Notes Version5.0.4
Ibm ≫ Lotus Notes Version5.0.5
Ibm ≫ Lotus Notes Version5.0.9a
Ibm ≫ Lotus Notes Version5.0.10
Ibm ≫ Lotus Notes Version5.0.11
Ibm ≫ Lotus Notes Versionr5
Ibm ≫ Lotus Notes Versionr6
Verity ≫ Keyview Viewing Sdk Versiongold
Winzip ≫ Winzip Version7.0
Microsoft ≫ Windows Xp Editionhome
Microsoft ≫ Windows Xp Updategold Editionprofessional
Microsoft ≫ Windows Xp Updatesp1 Editionhome
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 32.27% 0.967
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.kb.cert.org/vuls/id/383779
Third Party Advisory
US Government Resource