CVE-2002-0188

Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error...

CVE-2002-0188

Affected software: Microsoft Internet Explorer 5.01 and 6.0. The vulnerability arises from incorrect handling of Content-Disposition and Content-Type header fields, causing the spoofed file type to be passed to the OS for handling instead of triggering an error. This can enable remote code execut...