CVE

Id
4763  
CVE No.
CVE-2002-0371  
Status
Candidate  
Description
Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.  
Phase
Modified (20061101)  
Votes
ACCEPT(4) Baker, Cole, Foat, Wall | NOOP(2) Christey, Cox  
Comments
Christey> XF:ie-gopher-bo(9247) | URL:http://www.iss.net/security_center/static/9247.php | CERT-VN:VU#440275 | URL:http://www.kb.cert.org/vuls/id/440275 | BID:4930 | URL:http://www.securityfocus.com/bid/4930 | Christey> Investigate: should this include IE 5.01? | Christey> Note: CVE-2002-0646 was accidentally assigned to this issue. | That candidate will be rejected in favor of this one. | | ADDREF MS:MS02-047 | | ADDREF BUGTRAQ:20020729 Re: Eat gopher! | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=102796732424646&w=2