CVE-2002-0691

CVE-2002-0691 affects Microsoft Internet Explorer 5.01 and 5.5, enabling remote attackers to execute scripts in the Local Computer zone via a URL referencing a local HTML resource file (Cross-Site Scripting in Local HTML Resource, CAN-2002-0189). CERT and CVE records describe vulnerable local res...

Microsoft Internet Explorer contains cross-site scripting vulnerabilities in local HTML resources

Overview Microsoft Internet Explorer IE includes several local HTML resources that contain cross-site scripting vulnerabilities. These resources use the dialogArguments property of dialog frames insecurely, allowing an attacker to execute arbitrary script in the Local Machine Zone. Description...