Lucene search
HistorySep 24, 2002 - 4:00 a.m.
CVE-2002-0976
cve-2002-0976
internet explorer
remote attackers
arbitrary files
web page
xml datasource
applet
security vulnerability
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7 High
AI Score
Confidence
Low
0.951 High
EPSS
Percentile
99.3%
Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the applet.
Affected configurations
Node
microsoftinternet_explorerMatch4.0
ORmicrosoftinternet_explorerMatch4.0.1
ORmicrosoftinternet_explorerMatch4.0.1sp2
ORmicrosoftinternet_explorerMatch5.0
ORmicrosoftinternet_explorerMatch5.0.1
ORmicrosoftinternet_explorerMatch5.0.1sp1
ORmicrosoftinternet_explorerMatch5.0.1sp2
ORmicrosoftinternet_explorerMatch5.5
ORmicrosoftinternet_explorerMatch5.5sp1
ORmicrosoftinternet_explorerMatch5.5sp2
ORmicrosoftinternet_explorerMatch6.0
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7 High
AI Score
Confidence
Low
0.951 High
EPSS
Percentile
99.3%
Related for CVE-2002-0976