CVE-2002-0370 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2002-0370
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2002-0370

Description: Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

CVE Status: Candidate

References: XF http://www.iss.net/security_center/static/10251.php VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html SREASON http://securityreason.com/securityalert/587 MS http://www.microsoft.com/technet/security/bulletin/ms02-054.asp CONFIRM http://www.info.apple.com/usen/security/security_updates.html CERT-VN 383779 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=103428193409223&w=2 BID 5873

Return to the previous page.