CVE-2002-0189
Internet Explorer 6.0 - Cross-Site Scripting via Local HTML Resource
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-0189. PoCs published by GreyMagic Software.
AI-analyzed exploit summary This exploit leverages a domain validation bypass in Microsoft Internet Explorer's dialog functions (showModalDialog/showModelessDialog) by redirecting to a trusted resource (res://shdoclc.dll/analyze.dlg) while injecting arbitrary HTML into the Local Computer Zone. It uses a fake window object to bypass security checks and execute script in a privileged context.
Description
Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.
Exploits (1)
This exploit leverages a domain validation bypass in Microsoft Internet Explorer's dialog functions (showModalDialog/showModelessDialog) by redirecting to a trusted resource (res://shdoclc.dll/analyze.dlg) while injecting arbitrary HTML into the Local Computer Zone. It uses a fake window object to bypass security checks and execute script in a privileged context.