CVE-2002-1217 in Internet Explorer
Summary
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Disclosure
10/28/2002
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 19108 | Microsoft Internet Explorer Frame privileges management | 269 | Proof-of-Concept | Official fix | CVE-2002-1217 |