CVE-2002-0198: Buffer Overflow
Published May 3, 2002
·Updated
Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.
Affected Software
8 affected components
Paul L Daniels Ripmime=1.2.0
Paul L Daniels Ripmime=1.2.2
Paul L Daniels Inflex=1.0.10
Paul L Daniels Ripmime=1.2.3
Paul L Daniels Ripmime=1.2.6
Paul L Daniels Ripmime=1.2.5
Paul L Daniels Ripmime=1.2.1
Paul L Daniels Ripmime=1.2.4
Remediation
Patch Available
Event History
May 3, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0198?
CVE-2002-0198 is rated as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2002-0198?
To fix CVE-2002-0198, update ripMime to version 1.2.7 or later, or ensure you are not using any affected versions.
3
What software is affected by CVE-2002-0198?
CVE-2002-0198 affects ripMime versions 1.2.0 to 1.2.6 and Inflex version 1.0.10.
4
What is the nature of the vulnerability in CVE-2002-0198?
CVE-2002-0198 is a buffer overflow vulnerability that can be exploited through an attachment with a long filename.
5
Can CVE-2002-0198 be exploited remotely?
Yes, CVE-2002-0198 can be exploited remotely by attackers who send a crafted email attachment.