CVE-2002-0189: High severity Microsoft Internet Explorer vulnerability

Published May 17, 2002

Updated

Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.

Affected Software

5 affected components

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=5.0

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.5-sp1

Microsoft Internet Explorer=6.0

Event History

May 17, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0189?

CVE-2002-0189 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.

How do I fix CVE-2002-0189?

To fix CVE-2002-0189, update Internet Explorer to the latest version available from Microsoft.

Which versions of Internet Explorer are affected by CVE-2002-0189?

CVE-2002-0189 affects Internet Explorer versions 5.0, 5.5, and 6.0 including their service packs.

What type of attack does CVE-2002-0189 enable?

CVE-2002-0189 enables attackers to execute scripts in the Local Computer zone via malicious URLs.

Is there a workaround for CVE-2002-0189?

A potential workaround for CVE-2002-0189 is to restrict access to local HTML resources and avoid visiting untrusted sites.