Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272 | vdb-entry signature x_refsource_OVAL |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 | vendor-advisory x_refsource_MS |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333 | vdb-entry signature x_refsource_OVAL |
| http://marc.info/?l=bugtraq&m=103470310417576&w=2 | mailing-list x_refsource_BUGTRAQ |
| http://marc.info/?l=ntbugtraq&m=103470202010570&w=2 | mailing-list x_refsource_NTBUGTRAQ |
| http://www.iss.net/security_center/static/10371.php | vdb-entry x_refsource_XF |
| http://www.securityfocus.com/bid/5963 | vdb-entry x_refsource_BID |
| http://security.greymagic.com/adv/gm011-ie/ | x_refsource_MISC |
| http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html | mailing-list x_refsource_VULNWATCH |
| http://www.ciac.org/ciac/bulletins/n-018.shtml | third-party-advisory government-resource x_refsource_CIAC |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|