CVE-2002-1183 Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to e

What is CVE-2002-1183?

CVE-2002-1183 is a high-severity vulnerability in Microsoft Windows 98, published on 1 Sep 2004.

Official description

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).

Which versions are affected by CVE-2002-1183?

It affects 3 products.

Products include Microsoft Windows 98, Microsoft Windows 98se, Microsoft Windows Nt.

How do I fix CVE-2002-1183?

No fix has been published for CVE-2002-1183 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-1183 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-1183 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Microsoft Windows 98

• CVE-2006-2376 Integer overflow in n/a High 7.5
• CVE-2001-0876 Memory corruption in n/a High 7.5
• CVE-2001-1055 Denial of service in n/a Medium 5.0
• CVE-2001-0877 Denial of service in n/a Medium 5.0
• CVE-2001-0721 Denial of service in n/a Medium 5.0

All Microsoft Windows 98 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c4v9-9c8q-335m.