PT-2002-2436 · Microsoft · Internet Explorer

Published 2002-12-31 · Updated 2021-07-23 · CVE-2002-1714

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.0 through 6.0

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by using an object of type "text/html" with the DATA field that identifies the HTML document containing the object, potentially leading to infinite recursion.

Recommendations For Microsoft Internet Explorer versions 5.0 through 6.0, consider disabling the rendering of "text/html" objects with the DATA field as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2002-1714

Affected Products

Internet Explorer

References · 5

• 🔥 https://exploit-db.com/exploits/21404 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1714 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8904 · Note
• http://securityfocus.com/bid/4564 · Note
• http://online.securityfocus.com/archive/1/268776 · Note