CVE-2002-0022
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5...
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
- Record
CVE-2002-0022- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
- Record
CVE-2002-0022- Updated
- 2026-11-02
EUVDEUVD-2002-0022 No score
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
- Record
EUVD-2002-0022- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4fvj-f3fr-wwg4 No score
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5...
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
- Record
GHSA-4fvj-f3fr-wwg4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0022 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published March 8, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 39.8%, the 98th percentile. No source names a fixed version.
References
cert.org/advisories/CA-2002-04.html
marc.info?l=bugtraq&m=101362984930597&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A925
iss.net/security_center/static/8116.php
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
online.securityfocus.com/archive/1/258614
securityfocus.com/bid/4080
nvd.nist.gov/vuln/detail/CVE-2002-0022
github.com/advisories/GHSA-4fvj-f3fr-wwg4