CVE-2002-0299

CVE-2002-0299 describes a critical arbitrary code execution vulnerability in CNet CatchUp versions prior to 1.3.1. Attackers can exploit this by crafting a malicious .RVP file that creates and executes a file with an arbitrary extension, such as a .BAT file, during a scan. This vulnerability carries a high CVSS score of 7.6, indicating a network-based attack with high complexity but leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, publicly available exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion, suggesting awareness and potential for future exploitation.