First published: Tue Sep 24 2002(Updated: )
Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =5.01 | |
Internet Explorer | =5.5-sp2 | |
Internet Explorer | =5.5 | |
Internet Explorer | =5.01-sp1 | |
Internet Explorer | =5.01-sp2 | |
Internet Explorer | =5.5-sp1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0691 has a severity rating that indicates a significant risk of remote code execution.
To fix CVE-2002-0691, users should upgrade to a non-vulnerable version of Internet Explorer or apply the relevant security patches from Microsoft.
CVE-2002-0691 affects Internet Explorer versions 5.01 and 5.5, including various service packs.
CVE-2002-0691 is a variant of a Cross-Site Scripting vulnerability that allows script execution in the Local Computer zone.
Yes, CVE-2002-0691 can be exploited remotely through specially crafted URLs that reference local HTML resources.