PT-2002-2138 · Microsoft · Windows+1

Publicado 2002-10-11 · Atualizado 2018-10-12 · CVE-2002-1139

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version

Description: The issue arises from the Compressed Folders feature in Microsoft Windows not properly checking the destination folder during the decompression of ZIP files. This allows attackers to place an executable file in a known location on a user's system.

Recommendations: For Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP, update to a version that includes the fix for the Compressed Folders feature to properly check the destination folder during ZIP file decompression. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1139

Produtos afetados

Compressed Folders

Windows

Referências · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1139 · Nota de Segurança
• http://securityfocus.com/bid/5876 · Nota
• http://iss.net/security_center/static/10252.php · Aviso do Fabricante