Lucene search

[email protected]CVE-2002-2311

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-2311

2022-10-0316:23:49

CWE-264

[email protected]

web.nvd.nist.gov

cve-2002-2311

microsoft

internet explorer

remote attackers

arbitrary file upload

event.ctrlkey

event.shiftkey

onkeydown event

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.2 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.7%

JSON

Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the severity of this issue.

Affected configurations

NVD

Node

microsoftinternet_explorerMatch5.0

microsoftinternet_explorerMatch5.0.1

microsoftinternet_explorerMatch5.5

microsoftinternet_explorerMatch5.5sp1

microsoftinternet_explorerMatch5.5sp2

microsoftinternet_explorerMatch6.0

opera_softwareopera_web_browserMatch6.0.1

opera_softwareopera_web_browserMatch6.0.1linux

opera_softwareopera_web_browserMatch6.0.1win32

CPENameOperatorVersion
microsoft:internet_explorermicrosoft internet explorereq5.0
microsoft:internet_explorermicrosoft internet explorereq5.0.1
microsoft:internet_explorermicrosoft internet explorereq5.5
microsoft:internet_explorermicrosoft internet explorereq6.0
opera_software:opera_web_browseropera software opera web browsereq6.0.1

CPE	Name	Operator	Version
microsoft:internet_explorer	microsoft internet explorer	eq	5.0
microsoft:internet_explorer	microsoft internet explorer	eq	5.0.1
microsoft:internet_explorer	microsoft internet explorer	eq	5.5
microsoft:internet_explorer	microsoft internet explorer	eq	6.0
opera_software:opera_web_browser	opera software opera web browser	eq	6.0.1

References

online.securityfocus.com/archive/1/283866

online.securityfocus.com/archive/1/284068

www.iss.net/security_center/static/9653.php

www.securityfocus.com/bid/5290

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.2 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.7%

JSON

Related for CVE-2002-2311

nvd1 cvelist1