CVE-2002-0026

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-03-08

Last modified

2024-08-08

Affected products

• Internet Explorer (Microsoft)

References

• http://www.securityfocus.com/bid/4082
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A23
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A32