7.5

CVE-2002-1217

Exploit

EPSS 74.5%
Veröffentlicht 28.10.2002 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version5.5

Microsoft ≫ Internet Explorer Version5.5 Updatesp1

Microsoft ≫ Internet Explorer Version5.5 Updatesp2

Microsoft ≫ Internet Explorer Version6.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	74.5%	0.988

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html

http://marc.info/?l=bugtraq&m=103470310417576&w=2

http://marc.info/?l=ntbugtraq&m=103470202010570&w=2

http://security.greymagic.com/adv/gm011-ie/

Patch

Vendor Advisory

Exploit

http://www.ciac.org/ciac/bulletins/n-018.shtml

http://www.iss.net/security_center/static/10371.php

http://www.securityfocus.com/bid/5963

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333

https://nvd.nist.gov/vuln/detail/CVE-2002-1217

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-1217

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-1217

EUVD