PT-2002-2661 · Microsoft · Windows 98+2

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1940

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LCC-Win32 version 3.2

Description The issue allows attackers to gain sensitive information due to the compiler writing portions of previously used memory after the import table. It has been reported that this problem may be due to the operating system rather than the application itself.

Recommendations For LCC-Win32 version 3.2, consider using an alternative operating system to mitigate the risk, as the issue is reported to be related to Windows 95, 98, or ME. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1940

Affected Products

Windows 95

Windows 98

Windows Me

References · 4

• http://archives.neohapsis.com/archives/bugtraq/2002-07/0504.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1940 · Security Note
• http://iss.net/security_center/static/9749.php · Note
• http://securityfocus.com/bid/5391 · Note