GSD-2002-1254
Vulnerability from gsd - Updated: 2023-12-13 01:24Details
Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2002-1254",
"description": "Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka \"Cross Domain Verification via Cached Methods.\"",
"id": "GSD-2002-1254"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2002-1254"
],
"details": "Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka \"Cross Domain Verification via Cached Methods.\"",
"id": "GSD-2002-1254",
"modified": "2023-12-13T01:24:09.493990Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-1254",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka \"Cross Domain Verification via Cached Methods.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "6028",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/6028"
},
{
"name": "MS02-066",
"refsource": "MS",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066"
},
{
"name": "20021022 Vulnerable cached objects in IE (9 advisories in 1)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=103530131201191\u0026w=2"
},
{
"name": "ie-cache-showmodaldialog-dom-access(10432)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10432"
},
{
"name": "ie-cache-getelementsbytagname-dom-access(10438)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10438.php"
},
{
"name": "ie-cache-getelementsbyname-dom-access(10437)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10437.php"
},
{
"name": "oval:org.mitre.oval:def:388",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388"
},
{
"name": "ie-cache-getelementbyid-dom-access(10436)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10436.php"
},
{
"name": "oval:org.mitre.oval:def:408",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A408"
},
{
"name": "ie-cache-elementfrompoint-dom-access(10435)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10435.php"
},
{
"name": "http://security.greymagic.com/adv/gm012-ie/",
"refsource": "MISC",
"url": "http://security.greymagic.com/adv/gm012-ie/"
},
{
"name": "N-018",
"refsource": "CIAC",
"url": "http://www.ciac.org/ciac/bulletins/n-018.shtml"
},
{
"name": "ie-cache-execcommand-dom-access(10439)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/10439.php"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-1254"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka \"Cross Domain Verification via Cached Methods.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "6028",
"refsource": "BID",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"url": "http://www.securityfocus.com/bid/6028"
},
{
"name": "http://security.greymagic.com/adv/gm012-ie/",
"refsource": "MISC",
"tags": [],
"url": "http://security.greymagic.com/adv/gm012-ie/"
},
{
"name": "N-018",
"refsource": "CIAC",
"tags": [],
"url": "http://www.ciac.org/ciac/bulletins/n-018.shtml"
},
{
"name": "ie-cache-elementfrompoint-dom-access(10435)",
"refsource": "XF",
"tags": [],
"url": "http://www.iss.net/security_center/static/10435.php"
},
{
"name": "ie-cache-getelementbyid-dom-access(10436)",
"refsource": "XF",
"tags": [],
"url": "http://www.iss.net/security_center/static/10436.php"
},
{
"name": "ie-cache-getelementsbyname-dom-access(10437)",
"refsource": "XF",
"tags": [],
"url": "http://www.iss.net/security_center/static/10437.php"
},
{
"name": "ie-cache-getelementsbytagname-dom-access(10438)",
"refsource": "XF",
"tags": [],
"url": "http://www.iss.net/security_center/static/10438.php"
},
{
"name": "ie-cache-execcommand-dom-access(10439)",
"refsource": "XF",
"tags": [],
"url": "http://www.iss.net/security_center/static/10439.php"
},
{
"name": "20021022 Vulnerable cached objects in IE (9 advisories in 1)",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://marc.info/?l=bugtraq\u0026m=103530131201191\u0026w=2"
},
{
"name": "ie-cache-showmodaldialog-dom-access(10432)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/10432"
},
{
"name": "oval:org.mitre.oval:def:408",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A408"
},
{
"name": "oval:org.mitre.oval:def:388",
"refsource": "OVAL",
"tags": [],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388"
},
{
"name": "MS02-066",
"refsource": "MS",
"tags": [],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2021-07-23T12:55Z",
"publishedDate": "2002-12-11T05:00Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…