CVE-2002-0723

Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Tag."

Published: Sep 24, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-0723
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / internet_explorer	5.5-sp2	5.5-sp2.x
microsoft / internet_explorer	5.5	5.5.x
microsoft / internet_explorer	5.5-sp1	5.5-sp1.x
microsoft / internet_explorer	6.0	6.0.x

http://www.iss.net/security_center/static/9537.php
http://www.securityfocus.com/bid/5196
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047

Vulnerability Database

CVE-2002-0723

Deep Security Visibility Without the Complexity