← Back

CVE-2002-0976

nvd nist
Published: Sep 24, 2002Modified: Apr 16, 2026

JSON object

Loading...
6.4
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:N
Exploitability: 10.0 / Impact: 4.9
Source: NVD

Description

Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the applet.

Affected (11)

1 product
Internet Explorer
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Version 4.0.1
Version 4.0.1 sp2
Version 4.0
Version 5.0.1
Version 5.0.1 sp1
Version 5.0.1 sp2
Version 5.0
Version 5.5
Version 5.5 sp1
Version 5.5 sp2
Version 6.0

References (6)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.