Unscored CVE-2002-0027 EUVD-2002-0027GHSA-56vq-gj2v-q82q

Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open…

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874.

References

3031 vdb-entry
20011219 Internet Explorer Document.Open() Without Close() Cookie Stealing, File Reading, Site Spoofing Bug mailing-list
3721 vdb-entry
oval:org.mitre.oval:def:974 vdb-entry signature
MS02-005 vendor-advisory