OVAL Reference oval:org.mitre.oval:def:272

Oval Definition:

oval:org.mitre.oval:def:272

Revision Date:	2014-02-24	Version:	44
Title:	IE v6.0 Domain Restriction Bypass Cross-Frame Scripting
Description:	Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain restrictions.</TD></TR><TR><TD CLASS="cvenobg"><B>Family</B>:</TD><TD CLASS="cvenobg">windows</TD><TD CLASS="cvenobg"><B>Class</B>:</TD><TD CLASS="cvenobg">vulnerability</TD></TR><TR><TD CLASS="cvenobg"><B>Status</B>:</TD><TD CLASS="cvenobg">ACCEPTED</TD><TD CLASS="cvenobg"><B>Reference(s)</B>:</TD><TD CLASS="cvenobg"><A HREF="/cgi-bin/skdb.pl/cvename/CVE-2002-1217.html">CVE-2002-1217</A><BR></TD></TR><TR><TD CLASS="cvenobg"><B>Platform(s)</B>:</TD><TD CLASS="cvenobg">Microsoft Windows 2000<BR></TD><TD CLASS="cvenobg"><B>Product(s)</B>:</TD><TD CLASS="cvenobg">Microsoft Internet Explorer<BR></TD></TR><TR><TD CLASS="cvebg" COLSPAN="4"><B>Definition Synopsis</B></TD></TR><TR><TD CLASS="cvenobg" COLSPAN="4"><LI CLASS="leaf1"><A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:2884.html">the version of mshtml.dll is less than 6.0.2722.900</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3117.html">the patch q328970 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3116.html">the patch q324929 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3115.html">the patch q810847 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3114.html">the patch q813489 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3113.html">the patch q818529 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3112.html">the patch q822925 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3111.html">the patch q828750 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <B>NOT</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3110.html">the patch q824145 is installed (Installed Components key)</A> <LI CLASS="leaf1"><B>AND</B> <A HREF="/cgi-bin/skdb.pl/OVAL/oval:org.mitre.oval:tst:3090.html">Internet Explorer 6 is installed</A> </TD></TR></TABLE></CENTER></TD></TR> <TR><TD COLSPAN="2" ALIGN="CENTER"><A HREF="javascript:history.go(-1)">BACK</A></TD></TR> </table></center> </body> </html>