CVE

Id
5601  
CVE No.
CVE-2002-1217  
Status
Candidate  
Description
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.  
Phase
Modified (20061101)  
Votes
ACCEPT(3) Baker, Cole, Green | NOOP(1) Cox | REVIEWING(1) Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30631 5601 CVE-2002-1217 BUGTRAQ:20021015 Internet Explorer : The D-Day  View
30632 5601 CVE-2002-1217 URL:http://marc.info/?l=bugtraq&m=103470310417576&w=2  View
30633 5601 CVE-2002-1217 NTBUGTRAQ:20021015 Internet Explorer : The D-Day  View
30634 5601 CVE-2002-1217 URL:http://marc.info/?l=ntbugtraq&m=103470202010570&w=2  View
30635 5601 CVE-2002-1217 VULNWATCH:20021015 Internet Explorer : The D-Day  View
30636 5601 CVE-2002-1217 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html  View
30637 5601 CVE-2002-1217 MISC:http://security.greymagic.com/adv/gm011-ie/  View
30638 5601 CVE-2002-1217 MS:MS02-066  View
30639 5601 CVE-2002-1217 URL:http://www.microsoft.com/technet/security/bulletin/ms02-066.mspx  View
30640 5601 CVE-2002-1217 CIAC:N-018  View
30641 5601 CVE-2002-1217 URL:http://www.ciac.org/ciac/bulletins/n-018.shtml  View
30642 5601 CVE-2002-1217 BID:5963  View
30643 5601 CVE-2002-1217 URL:http://www.securityfocus.com/bid/5963  View
30644 5601 CVE-2002-1217 OVAL:oval:org.mitre.oval:def:272  View
30645 5601 CVE-2002-1217 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:272  View
30646 5601 CVE-2002-1217 OVAL:oval:org.mitre.oval:def:333  View
30647 5601 CVE-2002-1217 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:333  View
30648 5601 CVE-2002-1217 XF:ie-iframe-document-script-execution(10371)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63900 JVNDB-2002-000227 Microsoft Internet Explorer の frame や iframe におけるドメイン制限回避の脆弱性 ------------ CVE-2002-1217 5601 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000227.html  View