CVE-2002-0070

Published Mar 15, 2002

Last updated 6 years ago

Overview

Description: Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.6
Impact score: 10
Exploitability score: 4.9
Vector string: AV:N/AC:H/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AA733AD2-D948-46A0-A063-D29081A56F1F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E53CDA8E-50A8-4509-B070-CCA5604FFB21"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References