CVE-2002-0078
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote...
CVE-2002-0078 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published March 29, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 21.9%, the 97th percentile. No source names a fixed version.
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
Exploit likelihood
What each source reports
NVD Score used
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
- Record
CVE-2002-0078- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
- Record
CVE-2002-0078- Updated
- 2026-11-02
EUVDEUVD-2002-0078 No score
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
- Record
EUVD-2002-0078- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rh9r-xpf4-gh2j No score
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote...
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
- Record
GHSA-rh9r-xpf4-gh2j- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015
iss.net/security_center/static/8701.php
osvdb.org/3029
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A96
securityfocus.com/bid/4392
marc.info?l=bugtraq&m=101781180528301&w=2
nvd.nist.gov/vuln/detail/CVE-2002-0078
github.com/advisories/GHSA-rh9r-xpf4-gh2j