CVE:CVE-2002-0370
CNNVD:CNNVD-200210-238
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows的压缩文件夹功能允许用户以压缩格式存储数据文件和文件夹，以节省存储空间。由于用于从压缩文件进行解压的程序中存在未经检查的缓冲区，因此攻击者可以创建包含有畸形文件名的压缩文件，如果用户打开了该文件就会导致Windows资源管理器失效，或执行任意代码。
solution:Upgrade allume_systems_division stuffit_expander to a higher version than 6.5.2,and avoid the version 6.5.2; Upgrade ibm lotus_notes to a higher version than 4.5,5.0,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.9a,5.0.10,5.0.11,r5,r6,and avoid the version (,4.5],5.0,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.9a,5.0.10,5.0.11,r5,r6; Upgrade verity keyview_viewing_sdk to a higher version than gold,and avoid the version gold; Upgrade winzip winzip to a higher version than 7.0,and avoid the version 7.0; Upgrade microsoft windows_98_plus_pack to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,and avoid the version *:gold,*:sp1