CVE-2002-0023 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 37% (pctl 98)
Patch early
A public exploit exists.
Description
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 37.03% — more likely to be exploited than 98% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2002-03-08 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | internet explorer |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Internet Explorer 5/6 - GetObject File Disclosure | 2002-01-01 |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html
- http://www.osvdb.org/3030
- http://www.securityfocus.com/bid/3767
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7758
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html
- http://www.osvdb.org/3030
- http://www.securityfocus.com/bid/3767
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7758
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77
→ the Explorer · watch your stack · NVD