First published: Tue Dec 31 2002(Updated: )
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Internet Explorer | =6.0-sp1 | |
Internet Explorer | =5.5-sp2 | |
Internet Explorer | =5.0 | |
Internet Explorer | =5.5 | |
Internet Explorer | =5.5-sp1 | |
Internet Explorer | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1714 is categorized with a severity that can lead to denial of service due to a crash in affected versions of Internet Explorer.
To mitigate CVE-2002-1714, update your Internet Explorer to the latest version available or switch to a supported browser.
CVE-2002-1714 affects Microsoft Internet Explorer versions 5.0, 5.5 (including SP1 and SP2), and 6.0 (including SP1).
CVE-2002-1714 involves a denial of service attack that may cause the browser to crash due to infinite recursion.
CVE-2002-1714 is less relevant today due to the obsolescence of the affected Internet Explorer versions, but users should still be cautious.