Vulnerability Name:

CCN-10798

Published:2002-12-03
Updated:2002-12-03
Summary:Microsoft Internet Explorer could allow remote attacker to execute script in a victim's Local Computer zone by using a malicious style parameter in a dialog window to bypass security zone restrictions. A remote attacker could exploit this vulnerability by creating a malicious Web page that uses the showModalDialog or showModelessDialog function to open an dialog window containing malicious script embedded within the style parameter, which would be executed in the victim's local computer security zone, once the page is viewed. An attacker could use this vulnerability to steal cookies from the victim's computer, hijack Hotmail or MSN Messenger accounts, or possibly execute arbitrary commands on the victim's computer.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: BugTraq Mailing List, Tue Dec 03 2002 - 00:26:37 CST
Poisonous Style for Dialog window turns the zone off.

Source: CCN
Type: BID-6306
Microsoft Internet Explorer Dialog Style Same Origin Policy Bypass Vulnerability

Source: XF
Type: UNKNOWN
ie-dialog-style-access(10798)

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:ie:6.0:sp1:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    microsoft ie 6.0
    microsoft ie 6.0 sp1