PT-2002-2752 · Microsoft · Internet Explorer

Publicado 2002-12-31 · Atualizado 2021-07-23 · CVE-2002-2031

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 5.0, 5.0.1, 5.5

Description The issue allows remote attackers to determine the existence of arbitrary files. This is achieved via a script tag with a src parameter that references a non-JavaScript file. The onError event handler is then used to monitor the results.

Recommendations For Internet Explorer versions 5.0, 5.0.1, 5.5, consider disabling JavaScript execution as a temporary workaround to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-2031

Produtos afetados

Internet Explorer

Referências · 6

• 🔥 http://securityfocus.com/bid/3779 · Exploit
• 🔥 https://exploit-db.com/exploits/21199 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-01/0019.html · Exploit
• 🔥 https://exploit-db.com/exploits/21198 · Exploit
• http://iss.net/security_center/static/7784.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2031 · Nota de Segurança