high7.5Public exploit code
CVE-2002-0980
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Outlook Express 5/6 - MHTML URL Handler File Rendering2002-08-15 · remote · windows · Verified
Impact
The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=102942234427691&w=2
- http://marc.info/?l=ntbugtraq&m=102937705527922&w=2
- http://marc.info/?l=vuln-dev&m=102943486811091&w=2
- http://www.iss.net/security_center/static/9881.php
- http://www.securityfocus.com/bid/5473
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-014
- http://marc.info/?l=bugtraq&m=102942234427691&w=2
- http://marc.info/?l=ntbugtraq&m=102937705527922&w=2
- http://marc.info/?l=vuln-dev&m=102943486811091&w=2
- http://www.iss.net/security_center/static/9881.php
- http://www.securityfocus.com/bid/5473
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-014