CVE-2002-0370: Buffer Overflow
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0370?
CVE-2002-0370 is considered a critical vulnerability due to its potential to allow remote code execution and denial of service.
How do I fix CVE-2002-0370?
To fix CVE-2002-0370, apply the latest patches or updates from the software vendors for affected products.
Which products are affected by CVE-2002-0370?
CVE-2002-0370 affects multiple products including certain versions of Microsoft Windows, IBM Lotus Notes, and WinZip.
What type of attack does CVE-2002-0370 enable?
CVE-2002-0370 enables remote attackers to exploit buffer overflow vulnerabilities through specially crafted ZIP files.
What are the potential consequences of exploiting CVE-2002-0370?
Exploiting CVE-2002-0370 can lead to complete system compromise, allowing attackers to execute arbitrary code on affected systems.