CVE-2002-0191

EPSS 29.7%

Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/21361unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=101778302030981&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023 http://www.iss.net/security_center/static/8740.php http://www.securityfocus.com/bid/4411