PT-2002-2172 · Microsoft · Internet Explorer

Publicado 2002-12-11 · Atualizado 2021-07-23 · CVE-2002-1188

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.01 through 6.0

Description: The issue allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information, such as cookies, via certain uses of the OBJECT tag. This occurs because the OBJECT tag is not subjected to the proper security checks.

Recommendations: For Internet Explorer versions 5.01 through 6.0, consider disabling the use of the OBJECT tag until a patch is available. Restrict access to sensitive user information to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1188

Produtos afetados

Internet Explorer

Referências · 8

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A690 · Nota
• http://marc.info/?l=bugtraq&m=103184415307193&w=2 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A444 · Nota
• http://iss.net/security_center/static/10665.php · Aviso do Fabricante
• http://securityfocus.com/bid/6217 · Nota
• http://ciac.org/ciac/bulletins/n-018.shtml · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1188 · Nota de Segurança