CVE-2002-1186
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded...
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
- Record
CVE-2002-1186- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
- Record
CVE-2002-1186- Updated
- 2026-11-02
EUVDEUVD-2002-1170 No score
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
- Record
EUVD-2002-1170- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m222-2mhj-3987 No score
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded...
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
- Record
GHSA-m222-2mhj-3987- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1186 is a medium vulnerability (CVSS 5.0) in Microsoft Internet Explorer, published December 11, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 19.1%, the 97th percentile. No source names a fixed version.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066
securityfocus.com/bid/5610
archives.neohapsis.com/archives/bugtraq/2002-09/0018.html
iss.net/security_center/static/10039.php
osvdb.org/7845
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A495
Show 5 moreShow less
nvd.nist.gov/vuln/detail/CVE-2002-1186
github.com/advisories/GHSA-m222-2mhj-3987