CVE-2002-0647

Internet Explorer 5.01-6.0 - Remote Code Execution via Legacy Text Formatting ActiveX Control

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-0647. PoCs published by Mark Litchfield.

AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in Microsoft Internet Explorer's Legacy Text Formatting ActiveX control. The vulnerability is triggered by providing an overly long string in the 'Caption' parameter, leading to potential remote code execution.

Description

Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka "Buffer Overrun in Legacy Text Formatting ActiveX Control".

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mark Litchfield · textremotewindows

https://www.exploit-db.com/exploits/21748

View Code ZIP pw:eip

This exploit leverages a buffer overflow vulnerability in Microsoft Internet Explorer's Legacy Text Formatting ActiveX control. The vulnerability is triggered by providing an overly long string in the 'Caption' parameter, leading to potential remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Microsoft Internet Explorer (Legacy Text Formatting ActiveX control)

No auth needed

Prerequisites: Victim must visit a malicious webpage hosting the exploit · Legacy Text Formatting ActiveX control must be installed or downloaded

MITRE ATT&CK

T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5558

Third Party Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9935.php

Scores

EPSS 0.2334

EPSS Percentile 97.5%

Details

Status published

Products (3)

microsoft/internet_explorer 5.01 (3 CPE variants)

microsoft/internet_explorer 5.5 (3 CPE variants)

microsoft/internet_explorer 6.0

Published Sep 24, 2002

Tracked Since Feb 18, 2026