CVE-2002-0371: Microsoft Internet Explorer

High severity, CVSS 7.5. EPSS: 54.4% chance of exploitation in the next 30 days.

Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.

Affected products

• Microsoft Internet Explorer: version 5.0.1 only; version 5.5 only; version 6.0 only
• Microsoft Isa Server: version 2000 only
• Microsoft Proxy Server: version 2.0 only
• University Of Minnesota Gopher: any version

Published 2002-07-03. Last modified 2026-06-16.