NVD

Id
80172  
Name
CVE-2002-1186  
Description
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-05  
Published
2002-12-11  
Modified Date
2008-09-10  
Seq
2002-1186  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399658 80172 CVE-2002-1186 20020903 MSIEv6 % encoding causes a problem again  View
399659 80172 CVE-2002-1186 20020904 Re: MSIEv6 % encoding causes a problem again  View
399660 80172 CVE-2002-1186 oval:org.mitre.oval:def:143  View
399661 80172 CVE-2002-1186 oval:org.mitre.oval:def:471  View
399662 80172 CVE-2002-1186 oval:org.mitre.oval:def:495  View
399663 80172 CVE-2002-1186 ie-sameoriginpolicy-bypass(10039)  View
399664 80172 CVE-2002-1186 MS02-066  View
399665 80172 CVE-2002-1186 5610  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63956 JVNDB-2002-000283 Microsoft Internet Explorer のエンコード文字の取り扱いにおける情報漏洩の脆弱性 Microsoft Internet Explorer には、URL に含まれるエンコード文字の取り扱いに不備があり、セキュリティチェックを回避されてしまう脆弱性が存在します。 CVE-2002-1186 5570 CVE-2002-1186 80172 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000283.html 2002-11-20 2007-04-01 View