Vulnerability in Microsoft Internet Explorer
CVE-2002-1984
Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:00022613-0000-0000-C000-000000000046".
EPSS: 0.091 (94.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 5.0.1, 5.5, 6.0
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)