PT-2002-1983 · Microsoft · Internet Explorer

Publicado 2002-08-23 · Atualizado 2021-07-23 · CVE-2002-0976

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 4.0 and later

Description: The issue allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the applet.

Recommendations: For Internet Explorer versions 4.0 and later, consider disabling the use of legacy XML Datasource applets until a patch is available. Restrict access to the com.ms.xml.dso.XMLDSO.class applet to minimize the risk of exploitation. Avoid using the applet to access local files or modify base URLs that could point to the local system.

Exploit

Correção

Identificadores relacionados

CVE-2002-0976

Produtos afetados

Internet Explorer

Referências · 5

• 🔥 https://exploit-db.com/exploits/21721 · Exploit
• http://marc.info/?l=bugtraq&m=102960731805373&w=2 · Nota
• http://securityfocus.com/bid/5490 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0976 · Nota de Segurança
• http://iss.net/security_center/static/9885.php · Nota