CVE-2002-0024: High severity Microsoft Internet Explorer vulnerability
File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0024?
The severity of CVE-2002-0024 is classified as moderate due to its potential to mislead users into downloading unsafe files.
How do I fix CVE-2002-0024?
To fix CVE-2002-0024, it is advised to upgrade to a later version of Internet Explorer that is not affected by this vulnerability.
What versions of Internet Explorer are affected by CVE-2002-0024?
CVE-2002-0024 affects Internet Explorer versions 5.01, 5.5, and 6.0.
Can CVE-2002-0024 be exploited remotely?
Yes, CVE-2002-0024 can be exploited remotely by attackers through malicious downloads that leverage manipulated Content-Disposition and Content-Type headers.
What are the risks of CVE-2002-0024?
The risks of CVE-2002-0024 include potential unauthorized file downloads that may lead to malware infections or data breaches.