CVE-2002-0500
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on...
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size.
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size.
- Record
CVE-2002-0500- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size.
- Record
CVE-2002-0500- Updated
- 2026-11-02
EUVDEUVD-2002-0496 No score
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size.
- Record
EUVD-2002-0496- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5v65-cw5f-3jfp No score
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on...
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size.
- Record
GHSA-5v65-cw5f-3jfp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0500 is a medium vulnerability (CVSS 5.0) in Microsoft Internet Explorer, published June 11, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.2%, the 96th percentile. No source names a fixed version.