CVE-2002-0136: Medium severity Microsoft Internet Explorer vulnerability

Published Mar 15, 2002

Updated

Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript.

Affected Software

3 affected components

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.5-sp1

Event History

Mar 15, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the vulnerability CVE-2002-0136 about?

CVE-2002-0136 describes a denial of service vulnerability in Microsoft Internet Explorer 5.5 that can be triggered by long input values in form fields.

What software versions are affected by CVE-2002-0136?

CVE-2002-0136 affects Microsoft Internet Explorer 5.5, including service packs 1 and 2, running on Windows 98.

What exploit can be used for CVE-2002-0136?

CVE-2002-0136 can be exploited by remote web pages that send extremely long values via Javascript to form fields like INPUT and TEXTAREA.

What is the impact of CVE-2002-0136?

The impact of CVE-2002-0136 is a denial of service condition that causes the browser to hang.

How can CVE-2002-0136 be mitigated?

Mitigation for CVE-2002-0136 includes avoiding the use of Internet Explorer 5.5 and applying more secure web browsing practices.