CVE-2002-0023 Information

Description

Internet Explorer 5.01 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function which bypass some of GetObject’s security checks.

Reference

http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html http://www.osvdb.org/3030 http://www.securityfocus.com/bid/3767 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005 https://exchange.xforce.ibmcloud.com/vulnerabilities/7758 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A17 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A40 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A50 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A77