PT-2002-2752 · Microsoft · Internet Explorer

Published 2002-12-31 · Updated 2021-07-23 · CVE-2002-2031

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 5.0, 5.0.1, 5.5

Description The issue allows remote attackers to determine the existence of arbitrary files. This is achieved via a script tag with a src parameter that references a non-JavaScript file. The onError event handler is then used to monitor the results.

Recommendations For Internet Explorer versions 5.0, 5.0.1, 5.5, consider disabling JavaScript execution as a temporary workaround to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-2031

Affected Products

Internet Explorer

References · 6

• 🔥 http://securityfocus.com/bid/3779 · Exploit
• 🔥 https://exploit-db.com/exploits/21199 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-01/0019.html · Exploit
• 🔥 https://exploit-db.com/exploits/21198 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2031 · Security Note
• http://iss.net/security_center/static/7784.php · Note