Unscored severity · published Apr 22, 2002
CVE-2002-0152
Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file://…
–
CVSS
17.4%
EPSS
No
On KEV
Description
Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
Exploitation
Is it being used?
Exploit prediction (EPSS)17.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2001; 2001; v.x · source: NVD
EN
Entourage · Microsoft
2001; v._x · source: NVD
EX
Excel · Microsoft
2001; x · source: NVD
IE
IE · Microsoft
5.1 · source: NVD
OE
Outlook Express · Microsoft
5.0; 5.0.1; 5.0.2; 5.0.3 · source: NVD
PO
Powerpoint · Microsoft
98; 2001; v.x · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0152
marc.info
http://marc.info/?l=bugtraq&m=101897994314015&w=2
www.iss.net
http://www.iss.net/security_center/static/8850.php
www.osvdb.org
http://www.osvdb.org/5357
www.securityfocus.com
http://www.securityfocus.com/bid/4517
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability