CVE-2002-1139

Published Oct 11, 2002

Last updated 6 years ago

Overview

Description: The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression."
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:windows_98_plus_pack:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83DE6302-A76A-44C1-A2EC-27FD1B82B9B7"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References