CVE-2002-0077

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-01-13 · updated 2026-06-16

Description

Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable Invocation via Object tag" vulnerability.

Affected products

Microsoft Internet Explorer 11: 5.0.1-sp1, 5.0.1-sp2, 5.5, 5.5-sp1, 5.5-sp2, 6.0

References

http://marc.info/?l=bugtraq&m=101103188711920&w=2
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015
http://marc.info/?l=bugtraq&m=101103188711920&w=2
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015

Get alerted when CVE-2002-0077 or the next vulnerability affects your stack