CVE-2002-0101: Medium severity Microsoft Internet Explorer vulnerability

Published Mar 15, 2002

Updated

Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released.

Affected Software

4 affected components

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.5-sp1

Microsoft Internet Explorer=6.0

Event History

Mar 15, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0101?

CVE-2002-0101 is classified as a denial of service vulnerability affecting certain versions of Microsoft Internet Explorer.

How do I fix CVE-2002-0101?

To fix CVE-2002-0101, users should upgrade to a newer version of Microsoft Internet Explorer that is not affected by this vulnerability.

Who is affected by CVE-2002-0101?

Local users running Microsoft Internet Explorer versions 5.5 or 6.0 are affected by CVE-2002-0101.

Can CVE-2002-0101 be exploited remotely?

No, CVE-2002-0101 requires local user access to exploit the vulnerability.

What is the exploit method for CVE-2002-0101?

CVE-2002-0101 can be exploited by creating an infinite loop in modeless dialogs using the showModelessDialog function.