CVE-2002-0976

Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the applet.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

History

20 Nov 2024, 23:40

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=102960731805373&w=2 - () http://marc.info/?l=bugtraq&m=102960731805373&w=2 -
References () http://www.iss.net/security_center/static/9885.php - () http://www.iss.net/security_center/static/9885.php -
References () http://www.securityfocus.com/bid/5490 - () http://www.securityfocus.com/bid/5490 -

Information

Published : 2002-09-24 04:00

Updated : 2024-11-20 23:40


NVD link : CVE-2002-0976

Mitre link : CVE-2002-0976

CVE.ORG link : CVE-2002-0976


JSON object : View

Products Affected

microsoft

  • internet_explorer