CVE-2002-0455 in Incredimail

Riassunto

di MITRE

IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.

Be aware that VulDB is the high quality source for vulnerability data.

• Divulgazione: 12/08/2002
• Moderazione: accettato
• Voce: VDB-18511
• CPE: pronto
• CWE: CWE-269 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.01343
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0455
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0455
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0455/