PT-2002-1719 · Microsoft · Internet Explorer+1

Publicado 2002-10-04 · Atualizado 2018-10-12 · CVE-2002-0696

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Visual FoxPro version 6.0

Description The issue allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames, as Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer.

Recommendations For Microsoft Visual FoxPro version 6.0, consider registering associated files with Internet Explorer to prevent unauthorized execution of Visual FoxPro applications.

Correção

Identificadores relacionados

CVE-2002-0696

Produtos afetados

Internet Explorer

Visual Foxpro

Referências · 5

• http://ciac.org/ciac/bulletins/m-120.shtml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0696 · Nota de Segurança
• http://iss.net/security_center/static/10035.php · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049 · Aviso do Fabricante
• http://securityfocus.com/bid/5633 · Aviso do Fabricante