CVE-2002-0815

HIGH 7.5CVE-2002-0815 · Published 12/08/2002 · updated 16/06/2026

In short

CVE-2002-0815 is a HIGH (CVSS 7.5) vulnerability affecting internet explorer (microsoft).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6.0.2900`	No fix yet

Description

The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.

References

More vulnerabilities in internet explorer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free