{"id":"CVE-2002-1187","aliases":["EUVD-2002-1171","GHSA-95g5-p5xc-vf52"],"status":"published","title":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote...","description":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the \u003cframe\u003e or \u003ciframe\u003e element and javascript, aka \"Frames Cross Site Scripting,\" as demonstrated using the PrivacyPolicy.dlg resource.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.15029,"percentile":0.96743,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-12-11T05:00:00Z","modified":"2026-06-16T21:58:54Z","exploits":[{"source":"exploitdb","id":"EDB-21777","title":"Microsoft Internet Explorer 5 - IFrame/Frame Cross-Site/Zone Script Execution","type":"remote","platform":"windows","date":"2002-09-09","verified":true,"url":"https://www.exploit-db.com/exploits/21777"}],"products":[{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"http://www.securityfocus.com/bid/5672","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=103158601431054\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.osvdb.org/2998","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A203","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.iss.net/security_center/static/10066.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A225","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1187"},{"url":"https://github.com/advisories/GHSA-95g5-p5xc-vf52"}],"sources":{"cve":[{"id":"CVE-2002-1187","description":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the \u003cframe\u003e or \u003ciframe\u003e element and javascript, aka \"Frames Cross Site Scripting,\" as demonstrated using the PrivacyPolicy.dlg resource.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T03:19:27.491Z","updated_at":"2026-11-02T14:33:54.641433Z"}],"euvd":[{"id":"EUVD-2002-1171","description":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the \u003cframe\u003e or \u003ciframe\u003e element and javascript, aka \"Frames Cross Site Scripting,\" as demonstrated using the PrivacyPolicy.dlg resource.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T03:19:27Z","updated_at":"2026-11-03T01:14:57.2805Z"}],"ghsa":[{"id":"GHSA-95g5-p5xc-vf52","title":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote...","description":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the \u003cframe\u003e or \u003ciframe\u003e element and javascript, aka \"Frames Cross Site Scripting,\" as demonstrated using the PrivacyPolicy.dlg resource.","status":"published","published":"2022-04-30T18:20:42Z","modified":"2023-01-30T05:06:18Z","updated_at":"2026-11-02T14:47:27.706348Z"}],"nvd":[{"id":"CVE-2002-1187","description":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the \u003cframe\u003e or \u003ciframe\u003e element and javascript, aka \"Frames Cross Site Scripting,\" as demonstrated using the PrivacyPolicy.dlg resource.","status":"published","published":"2002-12-11T05:00:00Z","modified":"2026-06-16T21:58:54.03Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.239725Z"}]}}