CVE-2002-1984
Microsoft Internet Explorer 5.0.1-6.0 - Denial of Service via Crafted CLASSID in OBJECT Tag
Title source: llmDescription
Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046".
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5094
Exploit mailing-list
x_refsource_bugtraq
http://seclists.org/bugtraq/2002/Jun/0303.html
Scores
EPSS
0.0914
EPSS Percentile
94.8%
Details
Status
published
Products (3)
microsoft/internet_explorer
5.0.1 (3 CPE variants)
microsoft/internet_explorer
5.5 (3 CPE variants)
microsoft/internet_explorer
6.0
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026