CVE-2002-0057

CVE Database · CVE-2002-0057

CVE-2002-0057

· N/AModified

CVSS v3.1

N/A

EPSS

19.18%

Published

Mar 8, 2002

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.

Affected Products (9)

microsoft · internet_explorervulnerable

microsoft · sql_servervulnerable

microsoft · xml_core_servicesvulnerable

microsoft · windows_xpvulnerable

References (12)

http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html

Vendor Advisory

http://marc.info/?l=bugtraq&m=101366383408821&w=2

http://www.osvdb.org/3032

http://www.securityfocus.com/bid/3699

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-008

https://exchange.xforce.ibmcloud.com/vulnerabilities/7712

http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html

Vendor Advisory

http://marc.info/?l=bugtraq&m=101366383408821&w=2

http://www.osvdb.org/3032

http://www.securityfocus.com/bid/3699

KEV Catalog EPSS Scores Vendors All CVEs