Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2002-0193 | First vendor Publication | 2002-05-29 |
Vendor | Cve | Last vendor Modification | 2021-07-23 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
---|---|---|---|
Cvss Base Score | 7.5 | Attack Range | Network |
Cvss Impact Score | 6.4 | Attack Complexity | Low |
Cvss Expoit Score | 10 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability. |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0193 |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:27 | |||
Oval ID: | oval:org.mitre.oval:def:27 | ||
Title: | IE v5.01 Content Disposition/Type Arbitrary Code Execution | ||
Description: | Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability. | ||
Family: | windows | Class: | vulnerability |
Reference(s): | CVE-2002-0193 | Version: | 10 |
Platform(s): | Microsoft Windows 2000 | Product(s): | Microsoft Internet Explorer |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 4 |
ExploitDB Exploits
id | Description |
---|---|
2002-04-02 | Microsoft Internet Explorer 5 Cascading Style Sheet File Disclosure Vulnerabi... |
OpenVAS Exploits
Date | Description |
---|---|
2005-11-03 | Name : IE 5.01 5.5 6.0 Cumulative patch (890923) File : nvt/smb_nt_ms02-005.nasl |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
7850 | Microsoft IE Malformed Content Header Arbitrary Command Execution |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2002-02-13 | Name : Arbitrary code can be executed on the remote host through the web client. File : smb_nt_ms02-005.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2021-07-27 00:24:38 |
|
2021-07-24 01:44:16 |
|
2021-07-24 01:01:20 |
|
2021-07-23 17:24:42 |
|
2021-07-23 01:44:04 |
|
2021-07-23 01:01:19 |
|
2021-07-22 21:24:59 |
|
2021-05-04 12:01:37 |
|
2021-04-22 01:01:46 |
|
2020-05-23 00:14:55 |
|
2018-10-13 00:22:25 |
|
2017-10-10 09:23:24 |
|
2016-04-26 12:06:38 |
|
2013-05-11 12:08:38 |
|