What’s Vulnerable › Vulnerabilities

CVE-2002-2311

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-31 · updated 2026-06-16
• Weakness: CWE-264

Description

Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the severity of this issue.

Affected products

• Microsoft Internet Explorer 11: 5.0, 5.0.1, 5.5, 5.5-sp1, 5.5-sp2, 6.0
• Opera Software Opera Web Browser: 6.0.1

References

• http://online.securityfocus.com/archive/1/283866
• http://online.securityfocus.com/archive/1/284068
• http://www.iss.net/security_center/static/9653.php
• http://www.securityfocus.com/bid/5290
• http://online.securityfocus.com/archive/1/283866
• http://online.securityfocus.com/archive/1/284068
• http://www.iss.net/security_center/static/9653.php
• http://www.securityfocus.com/bid/5290

Get alerted when CVE-2002-2311 or the next vulnerability affects your stack