peter bassill · operator
$ cve CVE-2002-1254 JSON

CVE-2002-1254 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 53.5% (pctl 99)

Patch early

A public exploit exists.

Description

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS53.51% — more likely to be exploited than 99% of all CVEs
On CISA KEVno
Public exploityes
Published2002-12-11
Last modified2026-06-16

Affected (2)

VendorProduct
microsoftie
microsoftinternet explorer

Public exploits

SourceTitleDate
exploit-dbMicrosoft Internet Explorer 5/6 - Cached Objects Zone Bypass2002-10-22

References

→ the Explorer  ·  watch your stack  ·  NVD