CVE-2002-1186
Last modified
CVE-2002-1186 is a vulnerability of currently unknown severity. Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure.". EPSS estimates a 19.12% chance of exploitation in the next 30 days.
Description
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Ie | 6.0 | Sp1 |
| Microsoft | Internet Explorer | 5.0.1 | — |
| Microsoft | Internet Explorer | 5.5 | — |
| Microsoft | Internet Explorer | 6.0 | — |
References
- http://www.iss.net/security_center/static/10039.phpPatch, Vendor Advisory
- http://www.iss.net/security_center/static/10039.phpPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-1186?
How severe is CVE-2002-1186?
How do I fix CVE-2002-1186?
Are you affected by CVE-2002-1186?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST