Microsoft Windows 98 Plus Pack vulnerabilities

2 CVEs affecting Microsoft Windows 98 Plus Pack, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1139, published 2002-10-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-0370, published 2002-10-10. High severity, CVSS 7.5. EPSS: 43.3% chance of exploitation in the next 30 days. Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames,…
• CVE-2002-1139, published 2002-10-11. Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days. The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows…