CVE-2002-1188

Description

Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cookies via certain uses of the OBJECT tag, which are not subjected to the proper security checks, aka "Temporary Internet Files folders Name Reading."

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A690

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A444

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066

http://www.securityfocus.com/bid/6217

http://www.iss.net/security_center/static/10665.php

http://www.ciac.org/ciac/bulletins/n-018.shtml

http://marc.info/?l=bugtraq&m=103184415307193&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS