Microsoft Internet Explorer 5.0.1/6.0 - Content-Disposition Handling File Execution
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-2002-0192 | 29 May 200204:00 | – | attackerkb |
 | CVE-2002-0192 | 17 May 200204:00 | – | cve |
| CVE-2002-0193 | 1 Sep 200404:00 | – | cve |
 | CVE-2002-0192 | 17 May 200204:00 | – | cvelist |
| CVE-2002-0193 | 1 Sep 200404:00 | – | cvelist |
 | CVE-2002-0192 | 29 May 200204:00 | – | nvd |
| CVE-2002-0193 | 29 May 200204:00 | – | nvd |
 | IE 5.01 5.5 6.0 Cumulative patch (890923) | 3 Nov 200500:00 | – | openvas |
| Microsoft Internet Explorer 5.01, 5.5, 6.0 Cumulative Patch (890923, MS05-020) | 3 Nov 200500:00 | – | openvas |
 | Microsoft Internet Explorer (MSIE) Content-Disposition vulnerabilities | 24 Sep 200200:00 | – | cert |
10
source: https://www.securityfocus.com/bid/4752/info
An issue exists in the way Microsoft Internet Explorer handles conflicting information in some HTTP headers used to describe non-HTML content. A malicious web server may provide content with misleading values in the content-type and content-disposition headers.
Under some circumstances, the result may be that IE will automatically download and execute attacker-supplied programs.
It has been demonstrated that this vulnerability can be exploited when Windows Media Player 6.4 or 7.1 is installed on the system.
This vulnerability may also be exploited through HTML formatted email.
This vulnerability could potentially be exploited by an HTTP header similar to the following:
Content-Type: audio/x-ms-wma
Content-disposition: inline; filename="foo.exe"Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
22 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.33339