{"id":"CVE-2002-2282","url":"https://www.cyber-defence.io/tools/cve/CVE-2002-2282","generatedAt":"2026-10-27T17:29:55.132Z","title":"McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.","description":"McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.","published":"2002-12-31T05:00:00.000Z","lastModified":"2026-06-16T22:01:01.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":6.9,"severity":"MEDIUM","vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C"},"cwe":[],"affected":["mcafee/virusscan"],"epss":{"score":0.00325,"percentile":0.25383,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6288","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10741","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10741","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-2282","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}