CVE-2002-0190: High severity Microsoft Internet Explorer vulnerability

Published May 29, 2002

Updated

Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page that requires NetBIOS connectivity, aka "Zone Spoofing through Malformed Web Page" vulnerability.

Affected Software

7 affected components

Microsoft Internet Explorer=5.01

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.01-sp1

Microsoft Internet Explorer=5.01-sp2

Microsoft Internet Explorer=5.5-sp1

Microsoft Internet Explorer=6.0

Event History

May 29, 2002

CVE Published

04:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0190?

CVE-2002-0190 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2002-0190?

To mitigate CVE-2002-0190, users should upgrade to a supported version of Internet Explorer or apply available security patches from Microsoft.

Which versions of software are affected by CVE-2002-0190?

CVE-2002-0190 affects Microsoft Internet Explorer versions 5.01, 5.5, and 6.0.

What type of attack does CVE-2002-0190 enable?

CVE-2002-0190 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page.

Is CVE-2002-0190 related to NetBIOS connectivity?

Yes, CVE-2002-0190 requires NetBIOS connectivity to exploit the vulnerability.