CVEvulnerability

CVE-2002-0370

7.5 HIGH Published 2002-10-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-10-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

Affected configurations

• allume systems division stuffit expander 6.5.2 • ibm lotus notes (<= 4.5) • ibm lotus notes 5.0 • ibm lotus notes 5.0.1 • ibm lotus notes 5.0.2 • ibm lotus notes 5.0.3 • ibm lotus notes 5.0.4 • ibm lotus notes 5.0.5 • ibm lotus notes 5.0.9a • ibm lotus notes 5.0.10 • ibm lotus notes 5.0.11 • ibm lotus notes r5 • ibm lotus notes r6 • verity keyview viewing sdk gold • winzip winzip 7.0 • microsoft windows 98 plus pack • microsoft windows me • microsoft windows xp

References