CVE-2002-2311: Medium severity Opera Software Opera Web Browser vulnerability
Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the severity of this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2311?
CVE-2002-2311 has been classified as having a high severity due to the potential for arbitrary file uploads by remote attackers.
How do I fix CVE-2002-2311?
To fix CVE-2002-2311, you should upgrade to a patched version of Microsoft Internet Explorer or alternative web browsers that are not affected.
Which versions of Internet Explorer are affected by CVE-2002-2311?
CVE-2002-2311 affects Internet Explorer versions 5.0, 5.0.1, 5.5 (including SP1 and SP2), and 6.0.
Can CVE-2002-2311 be exploited on Opera versions?
Yes, CVE-2002-2311 can also be potentially exploited on Opera web browser version 6.0.1.
What kind of attack does CVE-2002-2311 enable?
CVE-2002-2311 enables remote attackers to upload arbitrary file contents through specific JavaScript events.