CVE-2002-0371: microsoft internet_explorer
Vulnerability summary
CVE-2002-0371 is a high (CVSS 7.5) vulnerability in microsoft internet_explorer. EPSS estimates a 54.44% chance of exploitation in the next 30 days, higher than 99% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Duplicates 1Timeline
- 15-06-2002PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
54.44%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 54.44% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Internet Explorer 5/6 / Microsoft ISA Server 2000 / Microsoft Proxy Server 2.0 Gopher Client - Remote Buffer Overflow
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft3 products
- internet_explorer5.01 | 5.01:sp1 | 5.01:sp2 | 5.5 | 5.5:sp1 | 5.5:sp2 | 6.0
- isa_server2000 | 2000:sp1
- proxy_server2.0 | 2.0:sp1
1 vendor · 3 products
References
9 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98VDB EntrySignatureX Refsource OVAL
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027Vendor AdvisoryX Refsource MS- www.pivx.com/workaround_fail.htmlX Refsource MISC