CVE-2002-1286
- State
- Published
- Severity
- Not scored
- Published
- Nov 14, 2002
- Updated
- Aug 8, 2024
- Reserved
- Nov 13, 2002
Description
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the security context of the site that is being visited by the user.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- VU#657625third-party-advisory
- 20021108 Technical information about unpatched MS Java vulnerabilitiesmailing-list
- 6142vdb-entry
- msvm-java-applet-redirect(10579)vdb-entry
- 20021108 Technical information about unpatched MS Java vulnerabilitiesmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.