Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0023. PoCs published by Georgi Guninski.
AI-analyzed exploit summary The exploit describes a vulnerability in Microsoft Internet Explorer where the 'GetObject()' JScript function with the 'htmlfile' ActiveX object can be manipulated to access the DOM of arbitrary files on the target system using '../' sequences in the URL. This could lead to information disclosure or arbitrary code execution.
Description
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
Exploits (1)
The exploit describes a vulnerability in Microsoft Internet Explorer where the 'GetObject()' JScript function with the 'htmlfile' ActiveX object can be manipulated to access the DOM of arbitrary files on the target system using '../' sequences in the URL. This could lead to information disclosure or arbitrary code execution.