CVE-2002-0647

Published: Sep 24, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka "Buffer Overrun in Legacy Text Formatting ActiveX Control".

Affected (7)

Products: Microsoft: Internet Explorer

Microsoft

1 product

Internet Explorer

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 5.01
Microsoft Internet Explorer	Version 5.01 sp1
Microsoft Internet Explorer	Version 5.01 sp2
Microsoft Internet Explorer	Version 5.5
Microsoft Internet Explorer	Version 5.5 sp1
Microsoft Internet Explorer	Version 5.5 sp2
Microsoft Internet Explorer	Version 6.0

References (6)

http://www.iss.net/security_center/static/9935.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/5558

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047

Source: cve@mitre.org

http://www.iss.net/security_center/static/9935.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5558

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.