Vulnerability Details CVE-2002-1684
Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.7%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2002-1684
-
cpe:2.3:a:deerfield:d2gfx:1.0.2
-
cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.5
-
cpe:2.3:a:working_resources_inc.:badblue:personal_1.5.6_beta