CVE-2002-1217 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 49.8% (pctl 99)
Patch early
A public exploit exists.
Description
Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 49.81% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2002-10-28 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | internet explorer |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Internet Explorer 5/6 - Unauthorized Document Object Model Access | 2002-10-15 |
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html
- http://marc.info/?l=bugtraq&m=103470310417576&w=2
- http://marc.info/?l=ntbugtraq&m=103470202010570&w=2
- http://security.greymagic.com/adv/gm011-ie/
- http://www.ciac.org/ciac/bulletins/n-018.shtml
- http://www.iss.net/security_center/static/10371.php
- http://www.securityfocus.com/bid/5963
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html
- http://marc.info/?l=bugtraq&m=103470310417576&w=2
- http://marc.info/?l=ntbugtraq&m=103470202010570&w=2
- http://security.greymagic.com/adv/gm011-ie/
- http://www.ciac.org/ciac/bulletins/n-018.shtml
- http://www.iss.net/security_center/static/10371.php
- http://www.securityfocus.com/bid/5963
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333
→ the Explorer · watch your stack · NVD