CVE-2002-1564

CVE-2002-1564 describes a vulnerability in Internet Explorer 5.5 and 6.0 where a cookie can contain script that is executed when a page loads, allowing remote attackers to steal potentially sensitive information from cookies (information disclosure). The underlying issue is the ability for a page...

CVE-2002-1564

Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability...

CVE-2002-0192

CVE-2002-0193 and CVE-2002-1564 describe Internet Explorer 5.01/5.5/6.0 vulnerabilities. CVE-2002-0193: remote code execution via malformed Content-Disposition/Content-Type headers causing the spoofed file type to be handled by the OS. CVE-2002-1564: cookie-based script in cookies that can expose...