CVE-2002-0023 Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
MediumCVSS 5.0
EPSS 39.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.01 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20020101 IE GetObject() problems mailing-list patch vendor-advisory
- 3030 vdb-entry
- 3767 exploit patch vdb-entry vendor-advisory
- MS02-005 vendor-advisory
- ie-getobject-directory-traversal(7758) vdb-entry
- oval:org.mitre.oval:def:17 signature vdb-entry
- oval:org.mitre.oval:def:40 signature vdb-entry
- oval:org.mitre.oval:def:50 signature vdb-entry
- oval:org.mitre.oval:def:77 signature vdb-entry