medium6.8Public exploit code
CVE-2002-1187
Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5 - IFrame/Frame Cross-Site/Zone Script Execution2002-09-09 · remote · windows · Verified
Impact
Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the <frame> or <iframe> element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 5.0, 5.0.1, 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=103158601431054&w=2
- http://www.iss.net/security_center/static/10066.php
- http://www.osvdb.org/2998
- http://www.securityfocus.com/bid/5672
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A203
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A225
- http://marc.info/?l=bugtraq&m=103158601431054&w=2
- http://www.iss.net/security_center/static/10066.php
- http://www.osvdb.org/2998
- http://www.securityfocus.com/bid/5672
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A203
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A225