PT-2002-1312 · Microsoft · Internet Explorer

Publicado 2002-05-03 · Atualizado 2021-07-23 · CVE-2002-0242

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer versions prior to 7

Description A cross-site scripting issue allows remote attackers to execute arbitrary script via an Extended HTML Form. The output from the remote server is not properly cleansed, enabling the execution of malicious scripts.

Recommendations For versions prior to 7, update to a newer version to mitigate the risk. As a temporary workaround, consider disabling the use of Extended HTML Forms in Internet Explorer until a patch is available. Restrict access to untrusted websites to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0242

Produtos afetados

Internet Explorer

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2002-0242 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101309907709138&w=2 · Nota