7.5

CVE-2002-0370: allume_systems_division stuffit_expander

CVSS: 7.5v2.0HighModified
Published 05-10-2002Last modified 08-08-2024
Open JSON

Vulnerability summary

CVE-2002-0370 is a high (CVSS 7.5) vulnerability in allume_systems_division stuffit_expander. EPSS estimates a 43.30% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities.

Overall risk
39/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v2.0 (NVD)
EPSS score
43.30%
0%100%
High · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 05-10-2002
    PublishedVulnerability first disclosed.
  2. 08-08-2024
    Last modifiedVulnerability information updated.

Description

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

43.30%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 43.30% on 21-09-2026

21-09-202621-10-2026
EPSS score
43.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Allume_systems_division1 product
Ibm1 product
  • lotus_notes≤ 4.5 | 5.0 | 5.0.1 | 5.0.2 | 5.0.3 | 5.0.4 | 5.0.5 | 5.0.9a | 5.0.10 | 5.0.11 | r5 | r6
Verity1 product
Winzip1 product

4 vendors · 4 products

References

9 links