Vulnerability in N/a

CVE-2002-0648

The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local fil…

EPSS: 0.593 (98.3th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

MS02-047 (x_refsource_MS, vendor-advisory)
oval:org.mitre.oval:def:1207 (signature, x_refsource_OVAL, vdb-entry)
5560 (vdb-entry, x_refsource_BID)
oval:org.mitre.oval:def:1026 (signature, x_refsource_OVAL, vdb-entry)
oval:org.mitre.oval:def:776 (signature, x_refsource_OVAL, vdb-entry)
ie-xml-redirect-read-files(9936) (vdb-entry, x_refsource_XF)
oval:org.mitre.oval:def:1148 (signature, x_refsource_OVAL, vdb-entry)
oval:org.mitre.oval:def:608 (signature, x_refsource_OVAL, vdb-entry)
20020823 Accessing remote/local content in IE (GM#009-IE) (mailing-list, x_refsource_BUGTRAQ)