CVE-2002-0370

Published: Oct 10, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

Affected (20)

Products: Allume Systems Division: Stuffit Expander · Ibm: Lotus Notes · Verity: Keyview Viewing Sdk · +2 more

Show all products

Allume Systems Division: Stuffit Expander · Ibm: Lotus Notes · Verity: Keyview Viewing Sdk · Winzip: Winzip · Microsoft: Windows 98 Plus Pack, Windows Me, Windows Xp

Allume Systems Division

1 product

1 product

1 product

1 product

3 products

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Allume Systems Division Stuffit Expander	Version 6.5.2
Ibm Lotus Notes	Up to 4.5
Ibm Lotus Notes	Version 5.0.10
Ibm Lotus Notes	Version 5.0.11
Ibm Lotus Notes	Version 5.0.1
Ibm Lotus Notes	Version 5.0.2
Ibm Lotus Notes	Version 5.0.3
Ibm Lotus Notes	Version 5.0.4
Ibm Lotus Notes	Version 5.0.5
Ibm Lotus Notes	Version 5.0.9a
Ibm Lotus Notes	Version 5.0
Ibm Lotus Notes	Version r5
Ibm Lotus Notes	Version r6
Verity Keyview Viewing Sdk	Version gold
Winzip Winzip	Version 7.0

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 98 Plus Pack	All versions
Microsoft Windows Me	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions