CVE-2002-1254 Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached me...
HighCVSS 7.5
EPSS 53.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 5.5-sp1 | No fix listed |
| Microsoft internet explorer | = 5.5-sp2 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20021022 Vulnerable cached objects in IE (9 advisories in 1) mailing-list
- security.greymagic.com
- N-018 government-resource third-party-advisory
- ie-cache-elementfrompoint-dom-access(10435) vdb-entry
- ie-cache-getelementbyid-dom-access(10436) vdb-entry
- ie-cache-getelementsbyname-dom-access(10437) vdb-entry
- ie-cache-getelementsbytagname-dom-access(10438) vdb-entry
- ie-cache-execcommand-dom-access(10439) vdb-entry
- 6028 exploit patch vdb-entry vendor-advisory
- MS02-066 vendor-advisory
- ie-cache-showmodaldialog-dom-access(10432) vdb-entry
- oval:org.mitre.oval:def:388 signature vdb-entry
- oval:org.mitre.oval:def:408 signature vdb-entry