View Definition

Definition Id: oval:org.mitre.oval:def:143 Version: 1  Last Modified: 2005-09-20
Title: Microsoft IE Encoded Characters Information Disclosure
Description: Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."
Family: windows Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2002-1186
Platform(s): Microsoft Windows 2000 Product(s): Microsoft Internet Explorer
Definition Synopsis: