CVE-2002-1254

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 53.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-12-11 · updated 2026-06-16

Description

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."

Affected products

Microsoft Ie: 6.0-sp1
Microsoft Internet Explorer 11: 5.5, 5.5-sp1, 5.5-sp2, 6.0

References

http://marc.info/?l=bugtraq&m=103530131201191&w=2
http://security.greymagic.com/adv/gm012-ie/
http://www.ciac.org/ciac/bulletins/n-018.shtml
http://www.iss.net/security_center/static/10435.php
http://www.iss.net/security_center/static/10436.php
http://www.iss.net/security_center/static/10437.php
http://www.iss.net/security_center/static/10438.php
http://www.iss.net/security_center/static/10439.php
http://www.securityfocus.com/bid/6028
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066
https://exchange.xforce.ibmcloud.com/vulnerabilities/10432
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388

Get alerted when CVE-2002-1254 or the next vulnerability affects your stack