NVD

Id
80173  
Name
CVE-2002-1187  
Description
Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the <frame> or <iframe> element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-12-11  
Modified Date
2016-10-17  
Seq
2002-1187  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399666 80173 CVE-2002-1187 20020909 Who framed Internet Explorer (GM#010-IE)  View
399667 80173 CVE-2002-1187 oval:org.mitre.oval:def:203  View
399668 80173 CVE-2002-1187 oval:org.mitre.oval:def:225  View
399669 80173 CVE-2002-1187 ie-frame-script-execution (10066)  View
399670 80173 CVE-2002-1187 MS02-066  View
399671 80173 CVE-2002-1187 5672  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63898 JVNDB-2002-000225 Microsoft Internet Explorer の frame におけるクロスサイトスクリプティングの脆弱性 ------------ CVE-2002-1187 5571 CVE-2002-1187 80173 6.8 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000225.html 2002-09-22 2007-04-01 View