CVE

Id
4451  
CVE No.
CVE-2002-0057  
Status
Entry  
Description
XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
21567 4451 CVE-2002-0057 BUGTRAQ:20011214 MSIE6 can read local files  View
21568 4451 CVE-2002-0057 URL:http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html  View
21569 4451 CVE-2002-0057 BUGTRAQ:20020212 Update on the MS02-005 patch, holes still remain  View
21570 4451 CVE-2002-0057 URL:http://marc.info/?l=bugtraq&m=101366383408821&w=2  View
21571 4451 CVE-2002-0057 MS:MS02-008  View
21572 4451 CVE-2002-0057 URL:http://www.microsoft.com/technet/security/bulletin/ms02-008.asp  View
21573 4451 CVE-2002-0057 BID:3699  View
21574 4451 CVE-2002-0057 URL:http://www.securityfocus.com/bid/3699  View
21575 4451 CVE-2002-0057 XF:ie-xmlhttp-redirect(7712)  View
21576 4451 CVE-2002-0057 URL:http://xforce.iss.net/xforce/xfdb/7712  View
21577 4451 CVE-2002-0057 OSVDB:3032  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63720 JVNDB-2002-000047 Microsoft Windows の XMLHTTP コントロールにおける情報漏洩の脆弱性 Microsoft XML Core Services (MSXML) に存在する XMLHTTP コントロールには、XMLHTTP GET 要求に応答して返されるデータストリームのセキュリティ設定をチェックしない脆弱性が存在します。 CVE-2002-0057 4451 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000047.html  View