Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2002-1045: Ultrafunk Popcorn may crash with future date

CVE-2002-1045 · published 24 years ago

Summary

The Ultrafunk Popcorn 1.20 application can stop working if it receives a date where the year is set beyond 2037. This happens because the program miscalculates such dates and crashes, denying service to users. Upgrade to a newer version or apply the vendor's patch to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ultrafunk	popcorn	1.20 `cpe:2.3:a:ultrafunk:popcorn:1.20:::::::*`

Original advisory text

Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037.

References

http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html
http://www.iss.net/security_center/static/9547.php Patch Vendor Advisory
http://www.securityfocus.com/bid/5212 Exploit Patch Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

2% chance of attack within 30 days

Timeline

Published4 Oct 2002

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2002-1045 · NVD

Track software like this

Free during beta