Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-1684

Description

Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.

Affected products

Alt N/D2gfx2 versions
cpe:2.3:a:deerfield:d2gfx:1.0.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:deerfield:d2gfx:1.0.2:*:*:*:*:*:*:*
- (no CPE)range: =1.0.2
Working Resources Inc./Badblue2 versions
cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.5:*:*:*:*:*:*:*
- cpe:2.3:a:working_resources_inc.:badblue:personal_1.5.6_beta:*:*:*:*:*:*:*
Working Resources Inc./Personal Editionllm-create
Range: =1.5.6
Working Resources Inc./Enterprise Editionllm-create
Range: 1.5.x

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2002-1684

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions