PT-2002-1222 · Microsoft · Internet Explorer

Published 2002-03-15 · Updated 2021-07-23 · CVE-2002-0136

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 5.5

Description The issue allows remote web pages to cause a denial of service, resulting in the application hanging. This can be achieved by using extremely long values for form fields, such as INPUT and TEXTAREA, which can be automatically filled via Javascript.

Recommendations For Microsoft Internet Explorer version 5.5, consider restricting the use of Javascript to automatically fill form fields until a fix is available. Additionally, avoid using extremely long values for form fields such as INPUT and TEXTAREA to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2002-0136

Affected Products

Internet Explorer

References · 4

• http://online.securityfocus.com/archive/1/250592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0136 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7938 · Note
• http://securityfocus.com/bid/3892 · Note