VulnerabilityModified
CVE-2002-1940
LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information.
MEDIUM 5.0EPSS 1.15%
Does this matter?
Lower severity and a low EPSS score (1.15%). Track it; it rarely justifies an emergency change on its own.
Description
LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.15% probability · 65th percentile
- CISA KEV
- Not listed
- Affected
- jacob navia/lcc-win32
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0504.htmlVendor Advisory
- http://www.iss.net/security_center/static/9749.php
- http://www.securityfocus.com/bid/5391
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0504.htmlVendor Advisory
- http://www.iss.net/security_center/static/9749.php
- http://www.securityfocus.com/bid/5391
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.