CVE-2002-0027
Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 19.3%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 19.32% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/internet explorer
- Source
- cve@mitre.org
References
- http://www.osvdb.org/3031
- http://www.securityfocus.com/archive/1/246522Vendor Advisory
- http://www.securityfocus.com/bid/3721Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A974
- http://www.osvdb.org/3031
- http://www.securityfocus.com/archive/1/246522Vendor Advisory
- http://www.securityfocus.com/bid/3721Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A974
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.