CVE-2002-0370

CVE-2002-0370 describes a buffer overflow vulnerability in the ZIP file handling capabilities of several products, including Microsoft Windows 98, XP, ME, Lotus Notes R4-R6, Verity KeyView, and Stuffit Expander. This flaw allows remote attackers to trigger a denial of service or execute arbitrary code by supplying specially crafted ZIP files containing entries with excessively long filenames. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its high FAUCET Risk Score of 93/100, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.