CVE-2002-0696

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ciac.org/ciac/bulletins/m-120.shtml
http://www.iss.net/security_center/static/10035.phpVendor Advisory
http://www.securityfocus.com/bid/5633Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049
http://www.ciac.org/ciac/bulletins/m-120.shtml
http://www.iss.net/security_center/static/10035.phpVendor Advisory
http://www.securityfocus.com/bid/5633Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049

Timeline

Published: Oct 4, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-069710.0Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP clien CVE-2002-06987.5Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an CVE-2002-06995.0Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, CVE-2002-07007.5Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers CVE-2002-07012.1ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have b CVE-2002-070210.0Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUP CVE-2002-07037.5An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prev CVE-2002-07047.5The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error m CVE-2002-07057.5The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory CVE-2002-07067.5UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows CVE-2002-07075.0The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large CVE-2002-07085.0Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary f