VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 11, 2002· Updated Jun 16, 2026

CVE-2002-1139

CVE-2002-1139

Description

The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Microsoft/Windows 98 Plus Pack
    cpe:2.3:a:microsoft:windows_98_plus_pack:*:*:*:*:*:*:*:*
  • Microsoft/Windows Me2 versions
    cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows Xp4 versions
    cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows 98llm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.