← back
CVE-2002-0023

CVE-2002-0023

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 37%
from disclosure to weapon0 days
Published on NVDJun 25
1st PoCJan 1
exploitation probability
37%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21195
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005https://exchange.xforce.ibmcloud.com/vulnerabilities/7758https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77http://www.osvdb.org/3030http://www.securityfocus.com/bid/3767