PT-2002-1983 · Microsoft · Internet Explorer

Published 2002-08-23 · Updated 2021-07-23 · CVE-2002-0976

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 4.0 and later

Description: The issue allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the applet.

Recommendations: For Internet Explorer versions 4.0 and later, consider disabling the use of legacy XML Datasource applets until a patch is available. Restrict access to the com.ms.xml.dso.XMLDSO.class applet to minimize the risk of exploitation. Avoid using the applet to access local files or modify base URLs that could point to the local system.

Exploit

Fix

Related Identifiers

CVE-2002-0976

Affected Products

Internet Explorer

References · 5

• 🔥 https://exploit-db.com/exploits/21721 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0976 · Security Note
• http://marc.info/?l=bugtraq&m=102960731805373&w=2 · Note
• http://securityfocus.com/bid/5490 · Note
• http://iss.net/security_center/static/9885.php · Note