CVE-2002-1183

Published: Dec 11, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).

Affected (3)

Products: Microsoft: Windows 98, Windows 98se, Windows Nt

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 98	All versions
Microsoft Windows 98se	All versions
Microsoft Windows Nt	Version 4.0

References (12)

http://www.securityfocus.com/bid/5410

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/9776

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108

Source: cve@mitre.org

http://www.securityfocus.com/bid/5410