CVE-2002-0269: Microsoft Internet Explorer

High severity, CVSS 7.5. EPSS: 11.5% chance of exploitation in the next 30 days.

Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.

Affected products

• Microsoft Internet Explorer: version 5.0 only; version 5.0.1 only; version 5.01 only; version 5.5 only; version 6.0 only

Published 2002-05-29. Last modified 2026-06-16.