CVE-2002-0022

None

CVSS

—

EPSS

39.8%

Published

Mar 8, 2002

CISA due date

—

The record

Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.

Affected packages

Ecosystem	Package	Introduced	Fixed