CVE

Id
5570  
CVE No.
CVE-2002-1186  
Status
Entry  
Description
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30412 5570 CVE-2002-1186 BUGTRAQ:20020903 MSIEv6 % encoding causes a problem again  View
30413 5570 CVE-2002-1186 URL:http://archives.neohapsis.com/archives/bugtraq/2002-09/0018.html  View
30414 5570 CVE-2002-1186 BUGTRAQ:20020904 Re: MSIEv6 % encoding causes a problem again  View
30415 5570 CVE-2002-1186 URL:http://archives.neohapsis.com/archives/bugtraq/2002-09/0030.html  View
30416 5570 CVE-2002-1186 MS:MS02-066  View
30417 5570 CVE-2002-1186 URL:http://www.microsoft.com/technet/security/bulletin/ms02-066.asp  View
30418 5570 CVE-2002-1186 BID:5610  View
30419 5570 CVE-2002-1186 URL:http://www.securityfocus.com/bid/5610  View
30420 5570 CVE-2002-1186 OSVDB:7845  View
30421 5570 CVE-2002-1186 URL:http://www.osvdb.org/7845  View
30422 5570 CVE-2002-1186 OVAL:oval:org.mitre.oval:def:143  View
30423 5570 CVE-2002-1186 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:143  View
30424 5570 CVE-2002-1186 OVAL:oval:org.mitre.oval:def:471  View
30425 5570 CVE-2002-1186 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:471  View
30426 5570 CVE-2002-1186 OVAL:oval:org.mitre.oval:def:495  View
30427 5570 CVE-2002-1186 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:495  View
30428 5570 CVE-2002-1186 XF:ie-sameoriginpolicy-bypass(10039)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63956 JVNDB-2002-000283 Microsoft Internet Explorer のエンコード文字の取り扱いにおける情報漏洩の脆弱性 Microsoft Internet Explorer には、URL に含まれるエンコード文字の取り扱いに不備があり、セキュリティチェックを回避されてしまう脆弱性が存在します。 CVE-2002-1186 5570 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000283.html  View