CVE-2002-0193
First published: Wed May 29 2002(Updated: )
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =5.0.1 | |
| Internet Explorer | =5.0.1-sp2 | |
| Internet Explorer | =5.0.1-sp1 | |
| Internet Explorer | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/4752
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A99
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A27
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9085
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023
Frequently Asked Questions
What is the severity of CVE-2002-0193?
CVE-2002-0193 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2002-0193?
To mitigate CVE-2002-0193, you should upgrade to a newer, secure version of Microsoft Internet Explorer.
What versions of Internet Explorer are affected by CVE-2002-0193?
CVE-2002-0193 affects Microsoft Internet Explorer 5.01 and 6.0.
What types of attacks are possible with CVE-2002-0193?
CVE-2002-0193 can be exploited by attackers to execute malicious code on a victim's system through malformed header fields.
How can I detect the exploitation of CVE-2002-0193?
Monitoring for unusual file execution patterns or unexpected popup errors in Internet Explorer can help detect exploitation of CVE-2002-0193.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/5.0.1
- version/internet explorer/5.0.1-sp2
- version/internet explorer/5.0.1-sp1
- version/internet explorer/6.0