CVE-2002-0152: Microsoft Entourage

High severity, CVSS 7.5. EPSS: 17.4% chance of exploitation in the next 30 days.

Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.

Affected products

• Microsoft Entourage: version 2001 only; version v._x only
• Microsoft Excel: version 2001 only; version x only
• Microsoft Ie: version 5.1 only
• Microsoft Office: version 2001 only; version v.x only
• Microsoft Outlook Express: version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only
• Microsoft PowerPoint: version 98 only; version 2001 only; version v.x only

Published 2002-04-22. Last modified 2026-06-16.