CVE-2002-0815: High severity Microsoft Internet Explorer vulnerability
The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0815?
CVE-2002-0815 has a severity rating that indicates a medium risk of exposure to sensitive data due to bypass of the Same Origin Policy.
How do I fix CVE-2002-0815?
To mitigate CVE-2002-0815, it's essential to update affected browsers to their latest versions that address this vulnerability.
Which browsers are affected by CVE-2002-0815?
CVE-2002-0815 affects Netscape Navigator, Mozilla, and Internet Explorer 6.0.2900.
What is the impact of CVE-2002-0815?
The impact of CVE-2002-0815 allows remote web servers to access restricted HTTP and SOAP/XML content, potentially leading to data leaks.
Is there a known exploit for CVE-2002-0815?
Yes, there are known exploits for CVE-2002-0815 that demonstrate how an attacker can leverage this vulnerability for unauthorized data access.