CVE-2002-1984: Medium severity Microsoft Internet Explorer vulnerability

Published Dec 31, 2002

Updated

Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046".

Affected Software

7 affected components

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=5.0.1

Microsoft Internet Explorer=5.0.1-sp2

Microsoft Internet Explorer=5.0.1-sp1

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.5-sp1

Microsoft Internet Explorer=6.0

Event History

Dec 31, 2002

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Jun 28, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1984?

CVE-2002-1984 has been classified with a severity rating that indicates it can lead to a denial of service condition.

How do I fix CVE-2002-1984?

To mitigate CVE-2002-1984, upgrading to a later version of Microsoft Internet Explorer that is not affected by this vulnerability is recommended.

What software versions are affected by CVE-2002-1984?

CVE-2002-1984 affects Microsoft Internet Explorer versions 5.0.1 through 6.0 on Windows 2000 or Windows XP.

What type of attack does CVE-2002-1984 allow?

CVE-2002-1984 allows remote attackers to cause a denial of service by crafting a specific CLASSID value.

Is CVE-2002-1984 still a risk for modern systems?

CVE-2002-1984 is largely considered obsolete for modern systems, but users of outdated software may still be vulnerable.