CVE-2002-1795

Published: Dec 31, 2002Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected (1)

Products: Microsoft: Tsac Activex Control

Microsoft

1 product

Tsac Activex Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Tsac Activex Control	All versions

References (8)

http://online.securityfocus.com/archive/1/294938

Source: cve@mitre.org

http://www.iss.net/security_center/static/10342.php

Source: cve@mitre.org

Patch

http://www.lac.co.jp/security/english/snsadv_e/56_e.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/5952

Source: cve@mitre.org

Patch

http://online.securityfocus.com/archive/1/294938

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10342.php

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.lac.co.jp/security/english/snsadv_e/56_e.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/5952

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.