CVE-2002-0193
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via...
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
- Record
CVE-2002-0193- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
- Record
CVE-2002-0193- Updated
- 2026-11-02
EUVDEUVD-2002-0190 No score
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
- Record
EUVD-2002-0190- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9529-88rc-3q6r No score
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via...
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
- Record
GHSA-9529-88rc-3q6r- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 5.0.1/6.0 - Content-Disposition Handling File Execution | 2002-05-15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0193 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published May 29, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 33.3%, the 98th percentile. No source names a fixed version.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023
securityfocus.com/bid/4752
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A99
exchange.xforce.ibmcloud.com/vulnerabilities/9085
nvd.nist.gov/vuln/detail/CVE-2002-0193
github.com/advisories/GHSA-9529-88rc-3q6r