medium6.4
CVE-2002-2311
Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaS…
Impact
Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the severity of this issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 5.0, 5.0.1, 5.5, 6.0 |
| Opera Software | Opera Web Browser | Version 6.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/283866
- http://online.securityfocus.com/archive/1/284068
- http://www.iss.net/security_center/static/9653.php
- http://www.securityfocus.com/bid/5290
- http://online.securityfocus.com/archive/1/283866
- http://online.securityfocus.com/archive/1/284068
- http://www.iss.net/security_center/static/9653.php
- http://www.securityfocus.com/bid/5290