CVE-2002-0370

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html
http://marc.info/?l=bugtraq&m=103428193409223&w=2
http://securityreason.com/securityalert/587
http://www.info-zip.org/FAQ.html
http://www.info.apple.com/usen/security/security_updates.html
http://www.iss.net/security_center/static/10251.phpVendor Advisory
http://www.kb.cert.org/vuls/id/383779Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/5873Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html
http://marc.info/?l=bugtraq&m=103428193409223&w=2
http://securityreason.com/securityalert/587
http://www.info-zip.org/FAQ.html
http://www.info.apple.com/usen/security/security_updates.html
http://www.iss.net/security_center/static/10251.phpVendor Advisory
http://www.kb.cert.org/vuls/id/383779Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/5873Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054

Timeline

Published: Oct 10, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-03717.5Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attacke CVE-2002-03727.5Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE CVE-2002-03737.2The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain L CVE-2002-03747.5Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrar CVE-2002-03755.0Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the s CVE-2002-03767.5Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.CVE-2002-03772.1Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access CVE-2002-03787.5The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accept CVE-2002-03797.5Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RF CVE-2002-03807.5Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an CVE-2002-03815.0The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which coul CVE-2002-03827.5XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell