CVE:CVE-2002-0152
CNNVD:CNNVD-200204-028
Microsoft公司为MacOS操作系统下提供多种产品，包括Internet Explorer、Outlook Express、Entourage、PowerPoint、Excel和Word.
MacOS系统下的这些产品在处理file:///URL时存在问题，可以导致缓冲区溢出。
由于在file://指示中处理子目录长度时存在问题，攻击者可以构建包含恶意file:///形式URL的WEB页面，并对file:///提交过多的字符，当MacOS下的浏览用户访问此链接的时候，可以导致缓冲区溢出，并存在以浏览用户权限执行任意代码的可能。
solution:Upgrade microsoft entourage to a higher version than 2001,v._x,and avoid the version 2001,v._x; Upgrade microsoft excel to a higher version than 2001,x,and avoid the version 2001,x; Upgrade microsoft ie to a higher version than 5.1,and avoid the version 5.1; Upgrade microsoft office to a higher version than 2001,2001:sr1,v.x,and avoid the version 2001,2001:sr1,v.x; Upgrade microsoft outlook_express to a higher version than 5.0,5.0.1,5.0.2,5.0.3,and avoid the version 5.0,5.0.1,5.0.2,5.0.3; Upgrade microsoft powerpoint to a higher version than 98,2001,v.x,and avoid the version 98,2001,v.x