What’s Vulnerable › Vulnerabilities

CVE-2002-1183

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-11 · updated 2026-06-16

Description

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).

Affected products

• Microsoft Windows 98: all versions
• Microsoft Windows 98Se: all versions
• Microsoft Windows Nt: 4.0

References

• http://www.securityfocus.com/bid/5410
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9776
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108
• http://www.securityfocus.com/bid/5410
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9776
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108

Get alerted when CVE-2002-1183 or the next vulnerability affects your stack