CVE-2002-0189

Summary: IE 6.0 contains cross-site scripting vulnerabilities that let an attacker script the Local Machine Zone by abusing local HTML resources via dialog frames. Vectors/Resources: vulnerable resources include local res:// HTML objects (e.g., res://shdoclc.dll/privacypolicy.dlg and related file...