CVE-2002-0228

Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).

• http://online.securityfocus.com/archive/1/254021Patch, Vendor Advisory
• http://www.iss.net/security_center/static/8084.phpVendor Advisory
• http://www.securityfocus.com/bid/4028
• http://online.securityfocus.com/archive/1/254021Patch, Vendor Advisory
• http://www.iss.net/security_center/static/8084.phpVendor Advisory
• http://www.securityfocus.com/bid/4028

Published

May 16, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0222Etype Eserv 2.97 allows remote attackers to redirect traffic…
• CVE-2002-0223Infopop UBB.Threads 5.4 and Wired Community Software WWWThre…
• CVE-2002-0224The MSDTC (Microsoft Distributed Transaction Service Coordin…
• CVE-2002-0225tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained …
• CVE-2002-0226retrieve_password.pl in DCForum 6.x and 2000 generates predi…
• CVE-2002-0227KICQ 2.0.0b1 allows remote attackers to cause a denial of se…
• CVE-2002-0229Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allow…
• CVE-2002-0230Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic…
• CVE-2002-0231Buffer overflow in mIRC 5.91 and earlier allows a remote ser…
• CVE-2002-0232Directory traversal vulnerability in Multi Router Traffic Gr…
• CVE-2002-0233Directory traversal vulnerability in eshare Expressions 4 We…
• CVE-2002-0234NetScreen ScreenOS before 2.6.1 does not support a maximum n…