CVE-2002-0371: Buffer Overflow

Published Jun 15, 2002

Updated

Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.

Affected Software

12 affected components

Microsoft Internet Explorer=5.0.1

Microsoft Internet Explorer=5.0.1-sp1

Microsoft Internet Explorer=5.0.1-sp2

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.5-sp1

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=6.0

Microsoft ISA Server=2000

Microsoft ISA Server=2000-sp1

Microsoft Proxy Server=2.0

Microsoft Proxy Server=2.0-sp1

University of Minnesota gopher

Event History

Jun 15, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0371?

CVE-2002-0371 is classified as a critical vulnerability that may allow remote code execution.

How do I fix CVE-2002-0371?

To fix CVE-2002-0371, update your Microsoft Internet Explorer to the latest version or apply the necessary security patches.

What software is affected by CVE-2002-0371?

CVE-2002-0371 affects Microsoft Internet Explorer versions 5.1 to 6.0, Microsoft Proxy Server 2.0, and Microsoft ISA Server 2000.

Can CVE-2002-0371 be exploited remotely?

Yes, CVE-2002-0371 can be exploited remotely through a specially crafted gopher URL.

What type of vulnerability is CVE-2002-0371?

CVE-2002-0371 is a buffer overflow vulnerability that can lead to arbitrary code execution.