CVE-2002-0077

CVE-2002-0077 describes a critical vulnerability in Microsoft Internet Explorer versions 5.01, 5.5, and 6.0, where objects invoked via the codebase property on an HTML page were incorrectly treated as part of the Local Computer zone. This flaw allowed remote attackers to execute local system executables, such as the popup object, leading to potential compromise of the affected system. With a CVSS score of 7.5 (HIGH), this vulnerability has a low attack complexity and could result in partial confidentiality, integrity, and availability impacts. While no active exploitation, public exploit code, or significant community discussion has been identified, the vulnerability's age and the affected product's end-of-life status likely contribute to its inactive status.