Lucene search
MitreCVE-2012-6502HistoryJan 22, 2013 - 3:55 p.m.
CVE-2012-6502
2013-01-2215:55:02
CWE-200
mitre
web.nvd.nist.gov
46
cve-2012-6502
microsoft internet explorer
remote attackers
sensitive information
unc share pathname
script element
nvd
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
AI Score
5.9
Confidence
Low
EPSS
0.003
Percentile
70.6%
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a \127.0.0.1\C$\ sequence.
Affected configurations
Node
microsoftinternet_explorerMatch6
ORmicrosoftinternet_explorerMatch6sp1
ORmicrosoftinternet_explorerMatch7
ORmicrosoftinternet_explorerMatch7.0.5730
ORmicrosoftinternet_explorerMatch8
ORmicrosoftinternet_explorerMatch9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | internet_explorer | 6 | cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 6 | cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:* |
| microsoft | internet_explorer | 7 | cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 7.0.5730 | cpe:2.3:a:microsoft:internet_explorer:7.0.5730:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 8 | cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:* |
| microsoft | internet_explorer | 9 | cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:* |
Related
openvas
openvas
Microsoft Internet Explorer Domain Policy Bypass Vulnerability
2013-02-01 00:00:00
Microsoft Internet Explorer Domain Policy Bypass Vulnerability
2013-02-01 00:00:00
cvelist
cvelist
CVE-2012-6502
2013-01-22 15:00:00
prion
prion
Code injection
2013-01-22 15:55:00
nvd
nvd
CVE-2012-6502
2013-01-22 15:55:02
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
AI Score
5.9
Confidence
Low
EPSS
0.003
Percentile
70.6%
Related for CVE-2012-6502