CVE-2002-0691

Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189...

CVE-2002-0189

Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability...

CVE-2002-0189

Summary: IE 6.0 contains cross-site scripting vulnerabilities that let an attacker script the Local Machine Zone by abusing local HTML resources via dialog frames. Vectors/Resources: vulnerable resources include local res:// HTML objects (e.g., res://shdoclc.dll/privacypolicy.dlg and related file...