VDB

GCVE-110-CERTCC-2001-932283

GCVE-110-CERTCC-2001-932283
Advisory Published
Vulnetix · Advisory published February 11, 2002
The Microsoft Internet Explorer HTML rendering engine contains a vulnerability in its handling of the SRC attribute of the HTML <EMBED> directive. An attacker who is able to convince a user to read a malicious HTML file may be able to crash Internt Explorer or execute arbitrary code with the user's privileges.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact17population15exploitation0widely_known18score_current50.49ease_of_exploitation16

Aliases

CVE-2002-0022

References

Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
advisory
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
url
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
url
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
url
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
url
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
advisory
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
advisory
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
advisory
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
advisory
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML &lt;EMBED&gt; directive
advisory

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›