PT-2002-2661 · Microsoft · Windows 98+2

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1940

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LCC-Win32 version 3.2

Description The issue allows attackers to gain sensitive information due to the compiler writing portions of previously used memory after the import table. It has been reported that this problem may be due to the operating system rather than the application itself.

Recommendations For LCC-Win32 version 3.2, consider using an alternative operating system to mitigate the risk, as the issue is reported to be related to Windows 95, 98, or ME. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1940

Produtos afetados

Windows 95

Windows 98

Windows Me

Referências · 4

• http://iss.net/security_center/static/9749.php · Nota
• http://securityfocus.com/bid/5391 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0504.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1940 · Nota de Segurança