CVE-2002-2031: Medium severity Microsoft Internet Explorer vulnerability
Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable JavaScript execution (Active Scripting) in Internet Explorer security settings to prevent script tags from being used to probe for local files (e.g., Internet Options → Security → Custom level → Scripting → Active scripting → Disable).
Internet Explorer Active Scripting (JavaScript execution) = Disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2031?
CVE-2002-2031 has a medium severity rating as it allows remote attackers to probe for the existence of files.
How do I fix CVE-2002-2031?
To mitigate CVE-2002-2031, users should upgrade to a later version of Internet Explorer or disable JavaScript execution.
What versions of Internet Explorer are affected by CVE-2002-2031?
CVE-2002-2031 affects Internet Explorer versions 5.0, 5.0.1, 5.5, and 6.0.
Can CVE-2002-2031 lead to further vulnerabilities?
Yes, exploiting CVE-2002-2031 could potentially lead to further attacks by revealing sensitive file paths.
Is CVE-2002-2031 still a concern for users today?
While CVE-2002-2031 primarily impacts older versions of Internet Explorer, users of legacy systems should still be aware of its implications.