CVE-2002-1139

CVE Database · CVE-2002-1139

CVE-2002-1139

· N/AModified

CVSS v3.1

N/A

EPSS

4.23%

Published

Oct 11, 2002

Modified

Apr 15, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression."

Affected Products (5)

microsoft · windows_98_plus_packvulnerable

microsoft · windows_mevulnerable

microsoft · windows_xpvulnerable

References (6)

http://www.iss.net/security_center/static/10252.php

Vendor Advisory

http://www.securityfocus.com/bid/5876

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054

http://www.iss.net/security_center/static/10252.php

Vendor Advisory

http://www.securityfocus.com/bid/5876

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054

KEV Catalog EPSS Scores Vendors All CVEs