CVE-2002-0370
Estado: ModificadaAlta (7.5)—
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 43%
- Percentil entre todas las CVEs puntuadas: 99
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (7)
CWE
- NVD-CWE-Other
Referencias
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html
- http://marc.info/?l=bugtraq&m=103428193409223&w=2
- http://securityreason.com/securityalert/587
- http://www.info-zip.org/FAQ.html
- http://www.info.apple.com/usen/security/security_updates.html
- http://www.iss.net/security_center/static/10251.php
- http://www.kb.cert.org/vuls/id/383779
- http://www.securityfocus.com/bid/5873
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html
- http://marc.info/?l=bugtraq&m=103428193409223&w=2
- http://securityreason.com/securityalert/587
- http://www.info-zip.org/FAQ.html
- http://www.info.apple.com/usen/security/security_updates.html
- http://www.iss.net/security_center/static/10251.php
- http://www.kb.cert.org/vuls/id/383779
- http://www.securityfocus.com/bid/5873
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054
JSON original (NVD)
Mostrar
{
"id": "CVE-2002-0370",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2002-10-10T04:00:00.000",
"references": [
{
"url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=103428193409223&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://securityreason.com/securityalert/587",
"source": "cve@mitre.org"
},
{
"url": "http://www.info-zip.org/FAQ.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.info.apple.com/usen/security/security_updates.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.iss.net/security_center/static/10251.php",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/383779",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/5873",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054",
"source": "cve@mitre.org"
},
{
"url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=103428193409223&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityreason.com/securityalert/587",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.info-zip.org/FAQ.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.info.apple.com/usen/security/security_updates.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.iss.net/security_center/static/10251.php",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/383779",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/5873",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0."
},
{
"lang": "es",
"value": "Desbordamiento de búfer en la capacidad ZIP de múltiples productos permite a atacantes remotos causar una denegación de servicio o ejecutar código arbitrario mediante ficheros ZIP que contienen nombres de ficheros largos, incluyendo\r\nMicrosoft Windows 98 con el paquete Plus!\r\nWindows XP\r\nWindows Me\r\nLotus Notes R4 a R6 (pre-gold)\r\nVerity KeyView, y\r\nStuffit Expander antes de 7.0."
}
],
"lastModified": "2026-06-16T21:57:18.340",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:allume_systems_division:stuffit_expander:6.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3741E010-136A-47C8-8CFE-8C8C556F1BA8"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06CEA48E-1CBC-48D9-ADCA-341BBBB524B0",
"versionEndIncluding": "4.5"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1D5D749-546A-4655-A0BF-0A2D4E9F51A1"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C43E91B-492D-42E0-9C59-3DA83AF7367B"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C944AEC-18C2-487E-8E0F-EC525D21EDF2"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D4B2601-B62F-4235-BFFD-281235737450"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA83054E-5E6B-48A4-8799-5C8507BFEB68"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7DEAC0E-C59B-42DB-BB81-E34C9F843486"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.9a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "780C6EC1-11FD-458C-B59F-11668BA1E466"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A7F5626-EB8B-4339-9EB5-C23962DAC95A"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:5.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CB071DF-5C48-4FE8-8DCC-68582A3C1EC6"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:r5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F4F8C0C-B817-4E38-95E6-5896E365C75F"
},
{
"criteria": "cpe:2.3:a:ibm:lotus_notes:r6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC24C6CC-70D0-4201-BA67-31ADAFAB3D69"
},
{
"criteria": "cpe:2.3:a:verity:keyview_viewing_sdk:gold:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A519207-A70B-433A-BA56-66240A5B2655"
},
{
"criteria": "cpe:2.3:a:winzip:winzip:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2ACBE01-B77A-4D09-8FB3-D6365786C44F"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:windows_98_plus_pack:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83DE6302-A76A-44C1-A2EC-27FD1B82B9B7"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC176BB0-1655-4BEA-A841-C4158167CC9B"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}