PT-2002-2436 · Microsoft · Internet Explorer

Publicado 2002-12-31 · Atualizado 2021-07-23 · CVE-2002-1714

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.0 through 6.0

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by using an object of type "text/html" with the DATA field that identifies the HTML document containing the object, potentially leading to infinite recursion.

Recommendations For Microsoft Internet Explorer versions 5.0 through 6.0, consider disabling the rendering of "text/html" objects with the DATA field as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-1714

Produtos afetados

Internet Explorer

Referências · 5

• 🔥 https://exploit-db.com/exploits/21404 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8904 · Nota
• http://securityfocus.com/bid/4564 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1714 · Nota de Segurança
• http://online.securityfocus.com/archive/1/268776 · Nota