VulnerabilityModified
CVE-2002-0070
Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
HIGH 7.6EPSS 18.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 18.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
- CVSS 2.0
- 7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
- EPSS
- 18.46% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- microsoft/windows 2000 · microsoft/windows 98 · microsoft/windows 98se · microsoft/windows nt
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=101594127017290&w=2
- http://www.iss.net/security_center/static/8384.php
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0203&L=ntbugtraq&F=P&S=&P=2404
- http://www.securityfocus.com/bid/4248
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-014
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A147
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18
- http://marc.info/?l=bugtraq&m=101594127017290&w=2
- http://www.iss.net/security_center/static/8384.php
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0203&L=ntbugtraq&F=P&S=&P=2404
- http://www.securityfocus.com/bid/4248
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-014
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A147
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.