CVE-2002-1327

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka "Unchecked Buffer in Windows Shell Could Enable System Compromise."

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 26, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-13346.8Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script asCVE-2002-13354.3Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrCVE-2002-13367.5TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authenticatiCVE-2002-133710.0Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related tCVE-2002-13385.0The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, CVE-2002-13395.0The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to CVE-2002-13405.0The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the CVE-2002-13416.8Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert scriCVE-2002-13427.5Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.CVE-2002-13445.0Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenaCVE-2002-13455.0Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files CVE-2002-13479.8Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute a
CVE-2002-1327: High severity, CVSS 7.5 | Vulnix