Description
Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A190
Scores
EPSS
0.0650
EPSS Percentile
93.1%
Details
Status
published
Products (6)
microsoft/windows_2000
microsoft/windows_98
microsoft/windows_98se
microsoft/windows_me
microsoft/windows_nt
4.0
microsoft/windows_xp
Published
Oct 04, 2002
Tracked Since
Feb 18, 2026