← Database

CVE-2002-0022

HIGH CVSS: 7.5 Published: 2002-03-08 Modified: 2026-06-16

Description

Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.

Affected Platforms

Microsoft Internet Explorer

Weakness Type

NVD-CWE-Other

References