CVE-2002-0152 Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large nu...
HighCVSS 7.5
EPSS 17.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft entourage | = 2001 | No fix listed |
| Microsoft entourage | = v._x | No fix listed |
| Microsoft excel | = 2001 | No fix listed |
| Microsoft excel | = x | No fix listed |
| Microsoft ie | = 5.1 | No fix listed |
| Microsoft office | = 2001 | No fix listed |
| Microsoft office | = 2001-sr1 | No fix listed |
| Microsoft office | = v.x | No fix listed |
| Microsoft outlook express | = 5.0 | No fix listed |
| Microsoft outlook express | = 5.0.1 | No fix listed |
| Microsoft outlook express | = 5.0.2 | No fix listed |
| Microsoft outlook express | = 5.0.3 | No fix listed |
| Microsoft powerpoint | = 98 | No fix listed |
| Microsoft powerpoint | = 2001 | No fix listed |
| Microsoft powerpoint | = v.x | No fix listed |
References
- 20020416 w00w00 on Microsoft IE/Office for Mac OS mailing-list
- ms-mac-html-file-bo(8850) vdb-entry
- 5357 vdb-entry
- 4517 vdb-entry
- MS02-019 vendor-advisory