QwikSec

Security Database

CVE

CWE

Training

CVE-2002-0976

Published: Aug 23, 2002

Modified: Aug 8, 2024

PUBLISHED

Description

Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the applet.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20020817 Internet explorer can read local files

mailing-list

x_refsource_BUGTRAQ

ie-xml-read-files(9885)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.