CVE-2002-0188

Published May 29, 2002

Last updated 3 years ago

Overview

Description: Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the "Content Disposition" vulnerability.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3BFFB565-F656-43E3-89E1-E412DC4C9D41"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A19F6133-25D1-44A5-B6B9-354703436783"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References