CVE-2002-0228

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/254021Patch, Vendor Advisory
http://www.iss.net/security_center/static/8084.phpVendor Advisory
http://www.securityfocus.com/bid/4028
http://online.securityfocus.com/archive/1/254021Patch, Vendor Advisory
http://www.iss.net/security_center/static/8084.phpVendor Advisory
http://www.securityfocus.com/bid/4028

Timeline

Published: May 16, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-02297.5Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restric CVE-2002-02305.0Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients CVE-2002-02317.5Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.CVE-2002-02325.0Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .CVE-2002-02335.0Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in a CVE-2002-02342.1NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trust CVE-2002-02357.5Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username CVE-2002-02367.5Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentica CVE-2002-02377.5Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remot CVE-2002-02387.5Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to ex CVE-2002-02397.2Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3)CVE-2002-02405.0PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pat