PT-2002-1222 · Microsoft · Internet Explorer

Publicado 2002-03-15 · Atualizado 2021-07-23 · CVE-2002-0136

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 5.5

Description The issue allows remote web pages to cause a denial of service, resulting in the application hanging. This can be achieved by using extremely long values for form fields, such as INPUT and TEXTAREA, which can be automatically filled via Javascript.

Recommendations For Microsoft Internet Explorer version 5.5, consider restricting the use of Javascript to automatically fill form fields until a fix is available. Additionally, avoid using extremely long values for form fields such as INPUT and TEXTAREA to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2002-0136

Produtos afetados

Internet Explorer

Referências · 4

• http://online.securityfocus.com/archive/1/250592 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0136 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7938 · Nota
• http://securityfocus.com/bid/3892 · Nota