CVE-2002-0370

published 2002-10-10

CVE-2002-0370: Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files…

Priority P3 38 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
allume_systems_division	stuffit_expander	—	—
ibm	lotus_notes	<= 4.5	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
ibm	lotus_notes	—	—
verity	keyview_viewing_sdk	—	—
winzip	winzip	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.