Description
Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack.
References (4)
Core 4
Core References
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/7592.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/3563
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/241400
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/241323
Scores
EPSS
0.0205
EPSS Percentile
79.4%
Details
Status
published
Products (7)
microsoft/ie
4.0
microsoft/ie
4.0.1 (2 CPE variants)
microsoft/ie
4.1 (3 CPE variants)
microsoft/internet_explorer
4.0
microsoft/internet_explorer
4.0.1 (2 CPE variants)
microsoft/internet_explorer
5.5 (3 CPE variants)
microsoft/internet_explorer
6.0
Published
Dec 31, 2001
Tracked Since
Feb 18, 2026