First published: Fri Mar 29 2002(Updated: )
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =5.5-sp2 | |
Internet Explorer | =5.0.1-sp2 | |
Internet Explorer | =5.0.1-sp1 | |
Internet Explorer | =5.5 | |
Internet Explorer | =5.5-sp1 | |
Internet Explorer | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0078 is classified as a critical vulnerability due to its ability to allow remote code execution.
To mitigate CVE-2002-0078, it is recommended to upgrade to a later version of Internet Explorer that does not contain this vulnerability.
CVE-2002-0078 affects Internet Explorer versions 5.0.1 SP1, 5.0.1 SP2, 5.5 SP1, 5.5 SP2, and 6.0.
CVE-2002-0078 can be exploited on any system with the vulnerable versions of Internet Explorer installed, making it critical for users to be aware.
CVE-2002-0078 allows remote attackers to execute scripts in the Local Computer zone, potentially leading to unauthorized access and data breaches.