CVE-2002-0057 in XML Core Services

Riassunto

di MITRE

XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Divulgazione: 08/03/2002
• Moderazione: accettato
• Voce: VDB-17962
• CPE: pronto
• CWE: CWE-269 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.0 (NVD)
• EPSS: 0.19175
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0057
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0057
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0057/