Unscored severity · published Oct 4, 2002
CVE-2002-0696
Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via…
–
CVSS
11.7%
EPSS
No
On KEV
Description
Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.7% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VF
Visual Foxpro · Microsoft
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0696
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0696
www.ciac.org
http://www.ciac.org/ciac/bulletins/m-120.shtml
Vendor Advisory
http://www.iss.net/security_center/static/10035.php
Patch
http://www.securityfocus.com/bid/5633
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049
More from Visual Foxpro
8.8
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
8.8
CVE-2012-0158
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
8.1
CVE-2009-2502
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002…
–
CVE-2009-3126
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project…
–
CVE-2009-2528
GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted…