CVE - CVE-2002-1186

CVE-ID
CVE-2002-1186	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:5610 URL:http://www.securityfocus.com/bid/5610 BUGTRAQ:20020903 MSIEv6 % encoding causes a problem again URL:http://archives.neohapsis.com/archives/bugtraq/2002-09/0018.html BUGTRAQ:20020904 Re: MSIEv6 % encoding causes a problem again URL:http://archives.neohapsis.com/archives/bugtraq/2002-09/0030.html MS:MS02-066 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 OSVDB:7845 URL:http://www.osvdb.org/7845 OVAL:oval:org.mitre.oval:def:143 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A143 OVAL:oval:org.mitre.oval:def:471 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A471 OVAL:oval:org.mitre.oval:def:495 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A495 XF:ie-sameoriginpolicy-bypass(10039) URL:http://www.iss.net/security_center/static/10039.php
Date Entry Created
20040901	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)