First published: Fri May 17 2002(Updated: )
Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =5.5-sp2 | |
Internet Explorer | =5.0 | |
Internet Explorer | =5.5 | |
Internet Explorer | =5.5-sp1 | |
Internet Explorer | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0189 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
To fix CVE-2002-0189, update Internet Explorer to the latest version available from Microsoft.
CVE-2002-0189 affects Internet Explorer versions 5.0, 5.5, and 6.0 including their service packs.
CVE-2002-0189 enables attackers to execute scripts in the Local Computer zone via malicious URLs.
A potential workaround for CVE-2002-0189 is to restrict access to local HTML resources and avoid visiting untrusted sites.