CVE

Id
5113  
CVE No.
CVE-2002-0723  
Status
Candidate  
Description
Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Tag."  
Phase
Modified (20030324-01)  
Votes
ACCEPT(5) Armstrong, Baker, Cole, Foat, Wall | MODIFY(1) Frech | NOOP(2) Christey, Cox  
Comments
Christey> Need to verify with Microsoft that this is: | BUGTRAQ:20020710 IE allows universal Cross Domain Scripting (TL#003) | URL:http://www.securityfocus.com/archive/1/281367 | MISC:http://www.PivX.com/larholm/adv/TL003/ | BUGTRAQ:20020710 Exploit: TL003/Dot Bug = Reading Non-Parsable Files | URL:http://www.securityfocus.com/archive/1/281660 | Frech> XF:ie-object-scripting(9537)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
26985 5113 CVE-2002-0723 MS:MS02-047  View
26986 5113 CVE-2002-0723 URL:http://www.microsoft.com/technet/security/bulletin/ms02-047.asp  View
26987 5113 CVE-2002-0723 BID:5196  View
26988 5113 CVE-2002-0723 URL:http://www.securityfocus.com/bid/5196  View
26989 5113 CVE-2002-0723 XF:ie-object-scripting(9537)  View

Related JVN