5

CVE-2002-0228

EPSS 28.61%
Veröffentlicht 16.05.2002 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Msn Messenger Version2.2

Microsoft ≫ Msn Messenger Version3.0

Microsoft ≫ Msn Messenger Version4.0

Microsoft ≫ Msn Messenger Version4.5

Microsoft ≫ Msn Messenger Version4.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	28.61%	0.961

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://online.securityfocus.com/archive/1/254021

Patch

Vendor Advisory

http://www.iss.net/security_center/static/8084.php

Vendor Advisory

http://www.securityfocus.com/bid/4028

https://nvd.nist.gov/vuln/detail/CVE-2002-0228

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0228

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0228

EUVD