medium6.4Public exploit code
CVE-2001-0722
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerabi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5/6 - Cookie Disclosure/Modification2001-11-09 · remote · windows · Verified
Impact
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=100527618108521&w=2
- http://www.ciac.org/ciac/bulletins/m-016.shtml
- http://www.osvdb.org/1982
- http://www.securityfocus.com/archive/1/221612
- http://www.securityfocus.com/bid/3513
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7486
- http://marc.info/?l=bugtraq&m=100527618108521&w=2
- http://www.ciac.org/ciac/bulletins/m-016.shtml
- http://www.osvdb.org/1982
- http://www.securityfocus.com/archive/1/221612
- http://www.securityfocus.com/bid/3513
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7486