Vulnerability in Microsoft Internet Explorer
CVE-2002-0269
Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.
EPSS: 0.115 (95.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 5.0, 5.0.1, 5.01
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)