CVE-2002-0023 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 39% (pctl 99)
Patch early
A public exploit exists.
Description
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 38.96% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2002-03-08 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | internet explorer |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Internet Explorer 5/6 - GetObject File Disclosure | 2002-01-01 |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html
- http://www.osvdb.org/3030
- http://www.securityfocus.com/bid/3767
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7758
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html
- http://www.osvdb.org/3030
- http://www.securityfocus.com/bid/3767
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7758
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77
→ the Explorer · watch your stack · NVD