CVE-2002-1186: Medium severity Microsoft ie vulnerability
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1186?
CVE-2002-1186 is considered a moderate severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2002-1186?
To fix CVE-2002-1186, it is recommended to upgrade to a newer version of Internet Explorer that is not affected by this vulnerability.
What kind of attack is possible with CVE-2002-1186?
CVE-2002-1186 allows attackers to execute phishing attacks by redirecting users to malicious sites to steal sensitive information.
Which versions of Internet Explorer are affected by CVE-2002-1186?
CVE-2002-1186 affects Internet Explorer versions 5.0.1 through 6.0, including all service packs.
Can CVE-2002-1186 lead to unauthorized access to user data?
Yes, CVE-2002-1186 can potentially lead to unauthorized access to sensitive user data through URL manipulation.