VULNERABILITY INTELLIGENCE

CVE-2002-1684

CVSS score5 MEDIUM

EPSS probability4.91%

CISA KEVNot currently listed

Published2002-12-31

Last modified2026-06-16

Description

Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.