PT-2002-1187 · Microsoft · Internet Explorer

Published 2002-03-15 · Updated 2021-07-23 · CVE-2002-0101

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6.0 and earlier

Description The issue allows local users to cause a denial of service via an infinite loop for modeless dialogs using the showModelessDialog function, which causes high CPU usage while the focus for the dialog is not released.

Recommendations For Microsoft Internet Explorer versions 6.0 and earlier, as a temporary workaround, consider disabling the use of modeless dialogs until a patch is available.

Fix

Related Identifiers

CVE-2002-0101

Affected Products

Internet Explorer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0101 · Security Note
• http://iss.net/security_center/static/7826.php · Vendor Advisory
• http://securityfocus.com/bid/3789 · Note
• http://marc.info/?l=bugtraq&m=101039104608083&w=2 · Note