CVE

Id
5526  
CVE No.
CVE-2002-1139  
Status
Entry  
Description
The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user"s system, aka "Incorrect Target Path for Zipped File Decompression."  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
29969 5526 CVE-2002-1139 MS:MS02-054  View
29970 5526 CVE-2002-1139 URL:http://www.microsoft.com/technet/security/bulletin/ms02-054.asp  View
29971 5526 CVE-2002-1139 XF:win-zip-incorrect-path(10252)  View
29972 5526 CVE-2002-1139 URL:http://www.iss.net/security_center/static/10252.php  View
29973 5526 CVE-2002-1139 BID:5876  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63910 JVNDB-2002-000237 Microsoft Windows の圧縮フォルダ機能における脆弱性 Microsoft Windows の圧縮フォルダ機能において、zip 形式ファイルの展開先のパスの妥当性をチェックしない不備が存在するため、任意の格納先に zip ファイルを展開することができる脆弱性が存在します。 CVE-2002-1139 5526 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000237.html  View