QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2002-0193

Back to search

CVE-2002-0193

Published: Sep 1, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.

VendorProductVersions

n/a

n/a

affected
n/a

References

MS02-023
vendor-advisory
x_refsource_MS
4752
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:99
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:27
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now