CVE-2002-1185
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when...
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
- Record
CVE-2002-1185- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
- Record
CVE-2002-1185- Updated
- 2026-11-02
EUVDEUVD-2002-1169 No score
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
- Record
EUVD-2002-1169- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-22c7-cppf-fmqm No score
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when...
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."
- Record
GHSA-22c7-cppf-fmqm- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1185 is a medium vulnerability (CVSS 5.0) in Microsoft Internet Explorer, published December 11, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 21.3%, the 97th percentile. No source names a fixed version.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066
securityfocus.com/bid/6216
eeye.com/html/Research/Advisories/AD20021211.html
marc.info?l=bugtraq&m=103970996205091&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A542
iss.net/security_center/static/10662.php