CVE-2002-1670: Microsoft Internet Explorer

Medium severity, CVSS 4.6. EPSS: 1.3% chance of exploitation in the next 30 days.

Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explorer unpatched.

Affected products

• Microsoft Internet Explorer: version 6.0 only
• Microsoft Windows XP: any version

Published 2002-12-31. Last modified 2026-06-16.