deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0413
Published: 2002-08-12
Description: Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/259464; http://www.iss.net/security_center/static/8353.php; http://www.securityfocus.com/bid/4220
CVE: CVE-2002-0414
Published: 2002-08-12
Description: KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0057.html; http://orange.kame.net/dev/cvsweb.cgi/kame/CHANGELOG; http://www.iss.net/security_center/static/8416.php
CVE: CVE-2002-0415
Published: 2002-08-12
Description: Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.
CVSS Score: 1.7 (LOW)
References: http://www.iss.net/security_center/static/8336.php; http://www.securityfocus.com/archive/1/259333; http://www.securityfocus.com/bid/4221
CVE: CVE-2002-0416
Published: 2002-08-12
Description: Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.
CVSS Score: 10.0 (HIGH)
References: http://www.iss.net/security_center/static/8379.php; http://www.securityfocus.com/archive/1/259818; http://www.securityfocus.com/bid/4232
CVE: CVE-2002-0417
Published: 2002-08-12
Description: Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/259730; http://www.endymion.com/products/mailman/history.htm; http://www.iss.net/security_center/static/8357.php
CVE: CVE-2002-0418
Published: 2002-08-12
Description: Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/259730; http://www.iss.net/security_center/static/8358.php; http://www.securityfocus.com/bid/4223
CVE: CVE-2002-0419
Published: 2002-08-12
Description: Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP address is provided as the realm for Basic authentication, which could reveal real IP addresses that were obscured by NAT, or (3) when NTLM authentication is used, the NetBIOS name of the server and its Windows NT domain are revealed in response to an Authorization request.  NOTE: this entry originally contained a vector (1) in which the server reveals whether it supports Basic or NTLM authentication through 401 Access Denied error messages.  CVE has REJECTED this vector; it is not a vulnerability because the information is already available through legitimate use, since authentication cannot proceed without specifying a scheme that is supported by both the client and the server.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0534&w=2; http://www.iss.net/security_center/static/8382.php; http://www.securityfocus.com/bid/4235
CVE: CVE-2002-0420
Published: 2002-08-12
Description: Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0056.html; http://www.iss.net/security_center/static/8386.php; http://www.securityfocus.com/bid/4237
CVE: CVE-2002-0421
Published: 2002-08-12
Description: IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/259963; http://www.iss.net/security_center/static/8388.php; http://www.securityfocus.com/bid/4236
CVE: CVE-2002-0422
Published: 2002-08-12
Description: IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7324&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]5320&w=2; http://www.iss.net/security_center/static/8385.php
CVE: CVE-2002-0423
Published: 2002-08-12
Description: Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html; http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.5.tar.gz; http://www.iss.net/security_center/static/8380.php
CVE: CVE-2002-0424
Published: 2002-08-12
Description: efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html; http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.6.2.tar.gz; http://www.iss.net/security_center/static/8381.php
CVE: CVE-2002-0425
Published: 2002-08-12
Description: mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/260244; http://www.iss.net/security_center/static/8393.php; http://www.osvdb.org/5301
CVE: CVE-2002-0426
Published: 2002-08-12
Description: VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.linksys.com/pub/befsr41/befvp41-1402.zip; http://online.securityfocus.com/archive/1/260613; http://www.iss.net/security_center/static/8397.php
CVE: CVE-2002-0427
Published: 2002-08-12
Description: Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:17.mod_frontpage.asc; http://www.iss.net/security_center/static/8400.php; http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-021.php
CVE: CVE-2002-0428
Published: 2002-08-12
Description: Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/260662; http://www.iss.net/security_center/static/8423.php; http://www.securityfocus.com/bid/4253
CVE: CVE-2002-0429
Published: 2002-08-12
Description: The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall).
CVSS Score: 3.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8888&w=2; http://www.debian.org/security/2003/dsa-311; http://www.debian.org/security/2003/dsa-312
CVE: CVE-2002-0430
Published: 2002-08-12
Description: MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
CVSS Score: 3.7 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html; http://www.securityfocus.com/bid/4252; http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html
CVE: CVE-2002-0451
Published: 2002-08-12
Description: filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/8448.php; http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19&mode=&order=; http://www.securityfocus.com/archive/1/261676
CVE: CVE-2002-0452
Published: 2002-08-12
Description: Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/8459.php; http://www.securityfocus.com/archive/1/261834; http://www.securityfocus.com/bid/4286
CVE: CVE-2002-0453
Published: 2002-08-12
Description: The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/8461.php; http://www.securityfocus.com/archive/1/262066; http://www.securityfocus.com/bid/4288
CVE: CVE-2002-0454
Published: 2002-08-12
Description: Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.qualcomm.com/eudora/servers/unix/popper/qpopper4.0.4.tar.gz; http://www.iss.net/security_center/static/8458.php; http://www.securityfocus.com/archive/1/262213
CVE: CVE-2002-0455
Published: 2002-08-12
Description: IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/8460.php; http://www.securityfocus.com/archive/1/262262; http://www.securityfocus.com/bid/4297
CVE: CVE-2002-0456
Published: 2002-08-12
Description: Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3677&w=2; http://www.iss.net/security_center/static/8487.php; http://www.securityfocus.com/archive/1/262704
CVE: CVE-2002-0457
Published: 2002-08-12
Description: Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as &lt;, &gt;, and &amp; in fields such as (1) name, (2) email, (3) AIM screen name, (4) website, (5) location, or (6) message.
CVSS Score: 7.6 (HIGH)
References: http://www.iss.net/security_center/static/8474.php; http://www.securityfocus.com/archive/1/262693; http://www.securityfocus.com/bid/4308
CVE: CVE-2002-0458
Published: 2002-08-12
Description: Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
CVSS Score: 7.6 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0206.html; http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools; http://www.iss.net/security_center/static/8477.php
CVE: CVE-2002-0459
Published: 2002-08-12
Description: Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
CVSS Score: 7.6 (HIGH)
References: http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools; http://www.iss.net/security_center/static/8475.php; http://www.securityfocus.com/archive/1/262694
CVE: CVE-2002-0460
Published: 2002-08-12
Description: Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0068.html; http://online.securityfocus.com/archive/1/262681; http://www.iss.net/security_center/static/8470.php
CVE: CVE-2002-0461
Published: 2002-08-12
Description: Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that calls location.replace on itself, causing a loop.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/262994; http://www.iss.net/security_center/static/8488.php; http://www.securityfocus.com/bid/4322
CVE: CVE-2002-0462
Published: 2002-08-12
Description: bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled.
CVSS Score: 6.4 (MEDIUM)
References: http://www.gezzed.net/bigsam/bigsam.1_1_12.php.txt; http://www.iss.net/security_center/static/8478.php; http://www.iss.net/security_center/static/8479.php
CVE: CVE-2002-0463
Published: 2002-08-12
Description: home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsc_language parameter, which leaks the pathname in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/8472.php; http://www.securityfocus.com/archive/1/262652; http://www.securityfocus.com/archive/1/262802
CVE: CVE-2002-0464
Published: 2002-08-12
Description: Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in arguments to (1) file_editor.asp, (2) folderactions.asp, or (3) editoractions.asp.
CVSS Score: 6.4 (MEDIUM)
References: http://www.hostingcontroller.com/english/patches/ForAll/download/dot-slash.zip; http://www.securityfocus.com/archive/1/262734; http://www.securityfocus.com/bid/4311
CVE: CVE-2002-0465
Published: 2002-08-12
Description: Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html; http://www.hostingcontroller.com/english/patches/ForAll/download/foldersecurity.zip; http://www.securityfocus.com/bid/3811
CVE: CVE-2002-0466
Published: 2002-08-12
Description: Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) servubrowse.asp, (3) browsedisk.asp, (4) browsewebalizerexe.asp, or (5) sqlbrowse.asp.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html; http://www.hostingcontroller.com/english/patches/ForAll/download/foldersecurity.zip; http://www.securityfocus.com/bid/3808
CVE: CVE-2002-0467
Published: 2002-08-12
Description: Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html; http://www.debian.org/security/2002/dsa-123; http://www.ecartis.org/
CVE: CVE-2002-0468
Published: 2002-08-12
Description: Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=listar-support&m=[PII_REDACTED]1720&w=2; http://online.securityfocus.com/archive/1/269658; http://online.securityfocus.com/archive/1/269879
CVE: CVE-2002-0469
Published: 2002-08-12
Description: Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html; http://www.iss.net/security_center/static/8444.php; http://www.securityfocus.com/archive/1/261209
CVE: CVE-2002-0470
Published: 2002-08-12
Description: PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path.
CVSS Score: 7.2 (HIGH)
References: http://seclists.org/bugtraq/2002/Mar/0263.html; http://www.iss.net/security_center/static/8484.php; http://www.securityfocus.com/bid/4304
CVE: CVE-2002-0471
Published: 2002-08-12
Description: PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.
CVSS Score: 10.0 (HIGH)
References: http://seclists.org/bugtraq/2002/Mar/0263.html; http://www.iss.net/security_center/static/8482.php; http://www.securityfocus.com/bid/4303
CVE: CVE-2002-0472
Published: 2002-08-12
Description: MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
CVSS Score: 5.0 (MEDIUM)
References: http://www.encode-sec.com/esp0202.pdf; http://www.iss.net/security_center/static/8582.php; http://www.securityfocus.com/archive/1/262906
CVE: CVE-2002-0473
Published: 2002-08-12
Description: db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0221.html; http://archives.neohapsis.com/archives/bugtraq/2002-03/0229.html; http://online.securityfocus.com/archive/82/262600
CVE: CVE-2002-0474
Published: 2002-08-12
Description: Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag.
CVSS Score: 5.1 (MEDIUM)
References: http://www.iss.net/security_center/static/8702.php; http://www.securityfocus.com/archive/1/264897; http://www.securityfocus.com/bid/4394
CVE: CVE-2002-0475
Published: 2002-08-12
Description: Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.
CVSS Score: 5.1 (MEDIUM)
References: http://www.iss.net/security_center/static/7459.php; http://www.securiteam.com/unixfocus/6W00Q202UM.html; http://www.securityfocus.com/bid/4379
CVE: CVE-2002-0476
Published: 2002-08-12
Description: Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/8584.php; http://www.macromedia.com/support/flash/ts/documents/fs_save.htm; http://www.securityfocus.com/archive/1/262990
CVE: CVE-2002-0477
Published: 2002-08-12
Description: Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the "exec" FSCommand.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3107&w=2; http://www.iss.net/security_center/static/8587.php; http://www.macromedia.com/support/flash/ts/documents/standalone_update.htm
CVE: CVE-2002-0478
Published: 2002-08-12
Description: The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9914&w=2; http://www.iss.net/security_center/static/8592.php; http://www.securityfocus.com/bid/4330
CVE: CVE-2002-0479
Published: 2002-08-12
Description: Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0284.html; http://www.iss.net/security_center/static/8607.php; http://www.securityfocus.com/bid/4347
CVE: CVE-2002-0480
Published: 2002-08-12
Description: ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers to gain access to the device during installation.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1138&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0051&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8876&w=2
CVE: CVE-2002-0481
Published: 2002-08-12
Description: An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function.
CVSS Score: 5.1 (MEDIUM)
References: http://online.securityfocus.com/archive/1/263429; http://www.iss.net/security_center/static/8604.php; http://www.securityfocus.com/bid/4340