CVE-2002-0696: High severity Microsoft Visual FoxPro vulnerability

Published Oct 4, 2002

Updated

Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.

Affected Software

1 affected component

Microsoft Visual FoxPro=6.0

Remediation

Patch Available

http://www.securityfocus.com/bid/5633

Event History

Oct 4, 2002

CVE Published

04:00 AM

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0696?

CVE-2002-0696 has been classified as a moderate severity vulnerability.

How do I fix CVE-2002-0696?

To remediate CVE-2002-0696, ensure that Internet Explorer restrictions are applied and consider upgrading to a newer version of Microsoft Visual FoxPro.

What does CVE-2002-0696 allow attackers to do?

CVE-2002-0696 allows remote attackers to execute Visual FoxPro applications without user warning through specially-crafted HTML files.

Is CVE-2002-0696 still a concern in modern systems?

CVE-2002-0696 may not be a significant concern for modern systems, but users of Microsoft Visual FoxPro 6.0 should be aware of its risks.

Which software versions are affected by CVE-2002-0696?

CVE-2002-0696 specifically affects Microsoft Visual FoxPro version 6.0.