PT-2002-1719 · Microsoft · Internet Explorer+1

Published 2002-10-04 · Updated 2018-10-12 · CVE-2002-0696

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Visual FoxPro version 6.0

Description The issue allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames, as Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer.

Recommendations For Microsoft Visual FoxPro version 6.0, consider registering associated files with Internet Explorer to prevent unauthorized execution of Visual FoxPro applications.

Fix

Related Identifiers

CVE-2002-0696

Affected Products

Internet Explorer

Visual Foxpro

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0696 · Security Note
• http://iss.net/security_center/static/10035.php · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049 · Vendor Advisory
• http://securityfocus.com/bid/5633 · Vendor Advisory
• http://ciac.org/ciac/bulletins/m-120.shtml · Note