Java Applet Vulnerability in Microsoft Internet Explorer
CVE-2002-1286

Currently unrated

Key Information:

Vendor
Microsoft
Status
Java Virtual Machine
Vendor
CVE Published:
29 November 2002

Summary

A vulnerability exists in Microsoft’s Java implementation used in Internet Explorer that allows remote attackers to manipulate URLs containing colons in their domain portions. This flaw can be exploited to steal user cookies and execute scripts under the security context of a site being visited, leading to unauthorized access to sensitive information.

References

http://www.kb.cert.org/vuls/id/657625
third-party-advisoryx_refsource_CERT-VN
http://marc.info/?l=ntbugtraq&m=103684360031565&w=2
mailing-listx_refsource_NTBUGTRAQ
http://www.securityfocus.com/bid/6142
vdb-entryx_refsource_BID

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.