CVE-2002-0228

Опубликовано: 16 мая 2002

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).

Ссылки

http://online.securityfocus.com/archive/1/254021
Patch
Vendor Advisory
http://www.iss.net/security_center/static/8084.php
Vendor Advisory
http://www.securityfocus.com/bid/4028
http://online.securityfocus.com/archive/1/254021
Patch
Vendor Advisory
http://www.iss.net/security_center/static/8084.php
Vendor Advisory
http://www.securityfocus.com/bid/4028

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:msn_messenger:2.2:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:msn_messenger:3.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:msn_messenger:4.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:msn_messenger:4.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:msn_messenger:4.6:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.28613

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-jvcw-7829-ggcr

github

почти 4 года назад