CVE-2002-1139: Medium severity microsoft windows xp vulnerability
The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression."
Affected Software
Event History
Frequently Asked Questions
What are the potential risks associated with CVE-2002-1139?
CVE-2002-1139 allows attackers to place executable files in known locations on a user's system, leading to unauthorized code execution.
Which versions of Windows are affected by CVE-2002-1139?
CVE-2002-1139 affects Microsoft Windows 98 with Plus! Pack, Windows Me, and various editions of Windows XP including SP1 and Gold.
How can I mitigate the risk of CVE-2002-1139?
To mitigate CVE-2002-1139, avoid using the Compressed Folders feature for untrusted ZIP files and consider upgrading to a more secure operating system.
What is the severity level of CVE-2002-1139?
CVE-2002-1139 is categorized as a critical vulnerability due to its potential to execute arbitrary code on affected systems.
Is there an official fix for CVE-2002-1139?
CVE-2002-1139 does not have an official patch, but users are advised to follow best security practices and consider system upgrades.