vulnwire
7.5high

CVE-2002-1254in critical feed1 exploit

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
53.5%
percentile 99%
Public exploits
1
Exploit-DB

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."

Exploit prediction (EPSS)

53.51% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-21959 Microsoft Internet Explorer 5/6 - Cached Objects Zone Bypass · remote · 2002-10-22

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • securityfocus.com /bid/6028 · vdb-entry, x_refsource_BID, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2002/ms02-066 · vendor-advisory, x_refsource_MS, x_transferred
  • marc.info /?l=bugtraq&m=103530131201191&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/10432 · vdb-entry, x_refsource_XF, x_transferred
  • iss.net /security_center/static/10438.php · vdb-entry, x_refsource_XF, x_transferred
  • iss.net /security_center/static/10437.php · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • iss.net /security_center/static/10436.php · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A408 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • iss.net /security_center/static/10435.php · vdb-entry, x_refsource_XF, x_transferred
  • security.greymagic.com /adv/gm012-ie/ · x_refsource_MISC, x_transferred
  • ciac.org /ciac/bulletins/n-018.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
  • iss.net /security_center/static/10439.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.