CVE-2002-0370
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.
Published:Oct 5, 2002
Last Modified:Apr 16, 2026
EPS:Oct 5, 2002
EPSS Score:0.3016
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Allume Systems Division
Product
Stuffit Expander
Allume Systems Division
Stuffit Expander
Vendor
Ibm
Product
Lotus Notes
Ibm
Lotus Notes
Vendor
Microsoft
Product
Windows 98 Plus Pack
Microsoft
Windows 98 Plus Pack
Vendor
Microsoft
Product
Windows Me
Microsoft
Windows Me
Vendor
Microsoft
Product
Windows Xp
Microsoft
Windows Xp
Vendor
Verity
Product
Keyview Viewing Sdk
Verity
Keyview Viewing Sdk
Vendor
Winzip
Product
Winzip
Winzip
Winzip
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
