CVE-2002-0152: Buffer Overflow

Published Apr 22, 2002

Updated

Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.

Affected Software

15 affected components

Microsoft Excel=x

Microsoft Outlook Express=5.0

Microsoft ie=5.1

Microsoft Office=2001-sr1

Microsoft Entourage=2001

Microsoft Outlook Express=5.0.2

Microsoft Office=2001

Microsoft PowerPoint=v.x

Microsoft Excel=2001

Microsoft PowerPoint=2001

Microsoft PowerPoint=98

Microsoft Outlook Express=5.0.3

Microsoft Office=v.x

Microsoft Outlook Express=5.0.1

Microsoft Entourage=v._x

Event History

Apr 22, 2002

CVE Published

04:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0152?

CVE-2002-0152 is categorized as a high severity vulnerability due to its potential for causing denial of service and executing arbitrary code.

How do I fix CVE-2002-0152?

To fix CVE-2002-0152, users should update their affected Microsoft applications to the latest versions available for their operating system.

What Microsoft applications are affected by CVE-2002-0152?

CVE-2002-0152 affects Microsoft Internet Explorer 5.1, Outlook Express 5.0 through 5.0.3, Entourage 2001, Excel 2001 and more on Mac.

Can CVE-2002-0152 be exploited remotely?

Yes, CVE-2002-0152 can be exploited remotely by attackers through the file:// directive using a crafted URL.

What type of vulnerability is CVE-2002-0152?

CVE-2002-0152 is classified as a buffer overflow vulnerability that leads to crashes or arbitrary code execution.